--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-07T16:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2775d187a972b3d795b0ed312e322ed63fa3ffdd5825ddbeaf4f98342cf398fc"}
{"level":"info","ts":"2026-07-07T16:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c7c617a8118c4ec42146ef3c4d2c20a4cf1562ae4be7cff245eabdc34147b80"}
{"level":"debug","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9904293144bc173e288a8825cb862ed0805db22c87c38bb24dfc8082df2d23de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9904293144bc173e288a8825cb862ed0805db22c87c38bb24dfc8082df2d23de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9904293144bc173e288a8825cb862ed0805db22c87c38bb24dfc8082df2d23de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9904293144bc173e288a8825cb862ed0805db22c87c38bb24dfc8082df2d23de"}
{"level":"debug","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9904293144bc173e288a8825cb862ed0805db22c87c38bb24dfc8082df2d23de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9904293144bc173e288a8825cb862ed0805db22c87c38bb24dfc8082df2d23de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9904293144bc173e288a8825cb862ed0805db22c87c38bb24dfc8082df2d23de"}
{"level":"debug","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fef6c6da88518a2aca8de5e3ea574d568b4f9d80294ca583186d947ce204efbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fef6c6da88518a2aca8de5e3ea574d568b4f9d80294ca583186d947ce204efbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9904293144bc173e288a8825cb862ed0805db22c87c38bb24dfc8082df2d23de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9904293144bc173e288a8825cb862ed0805db22c87c38bb24dfc8082df2d23de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fef6c6da88518a2aca8de5e3ea574d568b4f9d80294ca583186d947ce204efbc"}
{"level":"info","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9904293144bc173e288a8825cb862ed0805db22c87c38bb24dfc8082df2d23de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fef6c6da88518a2aca8de5e3ea574d568b4f9d80294ca583186d947ce204efbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9904293144bc173e288a8825cb862ed0805db22c87c38bb24dfc8082df2d23de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fef6c6da88518a2aca8de5e3ea574d568b4f9d80294ca583186d947ce204efbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fef6c6da88518a2aca8de5e3ea574d568b4f9d80294ca583186d947ce204efbc"}
{"level":"debug","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fef6c6da88518a2aca8de5e3ea574d568b4f9d80294ca583186d947ce204efbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fef6c6da88518a2aca8de5e3ea574d568b4f9d80294ca583186d947ce204efbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9904293144bc173e288a8825cb862ed0805db22c87c38bb24dfc8082df2d23de"}
{"level":"info","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fef6c6da88518a2aca8de5e3ea574d568b4f9d80294ca583186d947ce204efbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fef6c6da88518a2aca8de5e3ea574d568b4f9d80294ca583186d947ce204efbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fef6c6da88518a2aca8de5e3ea574d568b4f9d80294ca583186d947ce204efbc"}
{"level":"debug","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"001431cf61710e6c32c773dc691556c21049bd4426d4d0b7ccd9cb08f0fc1a24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847"}
{"level":"info","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"001431cf61710e6c32c773dc691556c21049bd4426d4d0b7ccd9cb08f0fc1a24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/001431cf61710e6c32c773dc691556c21049bd4426d4d0b7ccd9cb08f0fc1a24"}
{"level":"info","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"001431cf61710e6c32c773dc691556c21049bd4426d4d0b7ccd9cb08f0fc1a24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["001431cf61710e6c32c773dc691556c21049bd4426d4d0b7ccd9cb08f0fc1a24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"001431cf61710e6c32c773dc691556c21049bd4426d4d0b7ccd9cb08f0fc1a24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847"}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"001431cf61710e6c32c773dc691556c21049bd4426d4d0b7ccd9cb08f0fc1a24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/001431cf61710e6c32c773dc691556c21049bd4426d4d0b7ccd9cb08f0fc1a24"}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"001431cf61710e6c32c773dc691556c21049bd4426d4d0b7ccd9cb08f0fc1a24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"001431cf61710e6c32c773dc691556c21049bd4426d4d0b7ccd9cb08f0fc1a24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["001431cf61710e6c32c773dc691556c21049bd4426d4d0b7ccd9cb08f0fc1a24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"001431cf61710e6c32c773dc691556c21049bd4426d4d0b7ccd9cb08f0fc1a24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847"}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/001431cf61710e6c32c773dc691556c21049bd4426d4d0b7ccd9cb08f0fc1a24"}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"001431cf61710e6c32c773dc691556c21049bd4426d4d0b7ccd9cb08f0fc1a24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/001431cf61710e6c32c773dc691556c21049bd4426d4d0b7ccd9cb08f0fc1a24"}
{"level":"error","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847"}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5"}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5"}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5"}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5"}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4646197d7a17eee509dfef132f620fe9690a9bcf5005624bdb0f3671844473","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4646197d7a17eee509dfef132f620fe9690a9bcf5005624bdb0f3671844473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d4646197d7a17eee509dfef132f620fe9690a9bcf5005624bdb0f3671844473","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4646197d7a17eee509dfef132f620fe9690a9bcf5005624bdb0f3671844473"}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4646197d7a17eee509dfef132f620fe9690a9bcf5005624bdb0f3671844473","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d4646197d7a17eee509dfef132f620fe9690a9bcf5005624bdb0f3671844473"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4646197d7a17eee509dfef132f620fe9690a9bcf5005624bdb0f3671844473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d4646197d7a17eee509dfef132f620fe9690a9bcf5005624bdb0f3671844473","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5"}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4646197d7a17eee509dfef132f620fe9690a9bcf5005624bdb0f3671844473"}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b"}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b"}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b"}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed"}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b"}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed"}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b"}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764d6467fa0d60152b049ef14c9f70f8a342758a8defce10c051f2e3c6579a02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764d6467fa0d60152b049ef14c9f70f8a342758a8defce10c051f2e3c6579a02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed"}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764d6467fa0d60152b049ef14c9f70f8a342758a8defce10c051f2e3c6579a02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764d6467fa0d60152b049ef14c9f70f8a342758a8defce10c051f2e3c6579a02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"764d6467fa0d60152b049ef14c9f70f8a342758a8defce10c051f2e3c6579a02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764d6467fa0d60152b049ef14c9f70f8a342758a8defce10c051f2e3c6579a02"}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"764d6467fa0d60152b049ef14c9f70f8a342758a8defce10c051f2e3c6579a02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["764d6467fa0d60152b049ef14c9f70f8a342758a8defce10c051f2e3c6579a02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"764d6467fa0d60152b049ef14c9f70f8a342758a8defce10c051f2e3c6579a02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"764d6467fa0d60152b049ef14c9f70f8a342758a8defce10c051f2e3c6579a02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed"}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b"}
{"level":"info","ts":"2026-07-07T16:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/764d6467fa0d60152b049ef14c9f70f8a342758a8defce10c051f2e3c6579a02"}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55"}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55"}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55"}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55"}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55"}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee"}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee"}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee"}
{"level":"debug","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee"}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed3aeddd79886d91e759f4bc8cad9f53b48c4be895f62d83c08aabd2a81e1e19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3aeddd79886d91e759f4bc8cad9f53b48c4be895f62d83c08aabd2a81e1e19"}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed3aeddd79886d91e759f4bc8cad9f53b48c4be895f62d83c08aabd2a81e1e19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed3aeddd79886d91e759f4bc8cad9f53b48c4be895f62d83c08aabd2a81e1e19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed3aeddd79886d91e759f4bc8cad9f53b48c4be895f62d83c08aabd2a81e1e19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee"}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed3aeddd79886d91e759f4bc8cad9f53b48c4be895f62d83c08aabd2a81e1e19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3aeddd79886d91e759f4bc8cad9f53b48c4be895f62d83c08aabd2a81e1e19"}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed3aeddd79886d91e759f4bc8cad9f53b48c4be895f62d83c08aabd2a81e1e19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee"}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3aeddd79886d91e759f4bc8cad9f53b48c4be895f62d83c08aabd2a81e1e19"}
{"level":"error","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee"}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee"}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee"}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82d3bba6f9b55a8e3955c826dd4823666282c7a18a5c540a4d216a45eb2330e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82d3bba6f9b55a8e3955c826dd4823666282c7a18a5c540a4d216a45eb2330e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82d3bba6f9b55a8e3955c826dd4823666282c7a18a5c540a4d216a45eb2330e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82d3bba6f9b55a8e3955c826dd4823666282c7a18a5c540a4d216a45eb2330e8"}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82d3bba6f9b55a8e3955c826dd4823666282c7a18a5c540a4d216a45eb2330e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82d3bba6f9b55a8e3955c826dd4823666282c7a18a5c540a4d216a45eb2330e8"}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82d3bba6f9b55a8e3955c826dd4823666282c7a18a5c540a4d216a45eb2330e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82d3bba6f9b55a8e3955c826dd4823666282c7a18a5c540a4d216a45eb2330e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82d3bba6f9b55a8e3955c826dd4823666282c7a18a5c540a4d216a45eb2330e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82d3bba6f9b55a8e3955c826dd4823666282c7a18a5c540a4d216a45eb2330e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89eb06e3b093e8654317ade352a7a45c171a5fb36d5222518c0b760db063700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89eb06e3b093e8654317ade352a7a45c171a5fb36d5222518c0b760db063700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82d3bba6f9b55a8e3955c826dd4823666282c7a18a5c540a4d216a45eb2330e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89eb06e3b093e8654317ade352a7a45c171a5fb36d5222518c0b760db063700","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89eb06e3b093e8654317ade352a7a45c171a5fb36d5222518c0b760db063700"}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89eb06e3b093e8654317ade352a7a45c171a5fb36d5222518c0b760db063700","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a89eb06e3b093e8654317ade352a7a45c171a5fb36d5222518c0b760db063700"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89eb06e3b093e8654317ade352a7a45c171a5fb36d5222518c0b760db063700","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89eb06e3b093e8654317ade352a7a45c171a5fb36d5222518c0b760db063700","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82d3bba6f9b55a8e3955c826dd4823666282c7a18a5c540a4d216a45eb2330e8"}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89eb06e3b093e8654317ade352a7a45c171a5fb36d5222518c0b760db063700"}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6272cb8fda51459aff0f2f0eddc670e8ccf573350346cef062cb6532e3890a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718"}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6272cb8fda51459aff0f2f0eddc670e8ccf573350346cef062cb6532e3890a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6272cb8fda51459aff0f2f0eddc670e8ccf573350346cef062cb6532e3890a"}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6272cb8fda51459aff0f2f0eddc670e8ccf573350346cef062cb6532e3890a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd6272cb8fda51459aff0f2f0eddc670e8ccf573350346cef062cb6532e3890a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6272cb8fda51459aff0f2f0eddc670e8ccf573350346cef062cb6532e3890a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718"}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6272cb8fda51459aff0f2f0eddc670e8ccf573350346cef062cb6532e3890a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6272cb8fda51459aff0f2f0eddc670e8ccf573350346cef062cb6532e3890a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6272cb8fda51459aff0f2f0eddc670e8ccf573350346cef062cb6532e3890a"}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6272cb8fda51459aff0f2f0eddc670e8ccf573350346cef062cb6532e3890a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd6272cb8fda51459aff0f2f0eddc670e8ccf573350346cef062cb6532e3890a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6272cb8fda51459aff0f2f0eddc670e8ccf573350346cef062cb6532e3890a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718"}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac368d974b3e839b57007405970c94f0e2854e574eb55af9002e55db2bbc66d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6272cb8fda51459aff0f2f0eddc670e8ccf573350346cef062cb6532e3890a"}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac368d974b3e839b57007405970c94f0e2854e574eb55af9002e55db2bbc66d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd6272cb8fda51459aff0f2f0eddc670e8ccf573350346cef062cb6532e3890a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac368d974b3e839b57007405970c94f0e2854e574eb55af9002e55db2bbc66d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac368d974b3e839b57007405970c94f0e2854e574eb55af9002e55db2bbc66d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac368d974b3e839b57007405970c94f0e2854e574eb55af9002e55db2bbc66d"}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac368d974b3e839b57007405970c94f0e2854e574eb55af9002e55db2bbc66d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ac368d974b3e839b57007405970c94f0e2854e574eb55af9002e55db2bbc66d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac368d974b3e839b57007405970c94f0e2854e574eb55af9002e55db2bbc66d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac368d974b3e839b57007405970c94f0e2854e574eb55af9002e55db2bbc66d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718"}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac368d974b3e839b57007405970c94f0e2854e574eb55af9002e55db2bbc66d"}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db"}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db"}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db"}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db"}
{"level":"info","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d31a2d7-9ccf-4cda-8129-12c5e1565073","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47580","PortSpecifier":{"PortValue":47580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d31a2d7-9ccf-4cda-8129-12c5e1565073","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d31a2d7-9ccf-4cda-8129-12c5e1565073","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47580","PortSpecifier":{"PortValue":47580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440375,"nanos":460740807},"http":{"id":"8d31a2d7-9ccf-4cda-8129-12c5e1565073","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d31a2d7-9ccf-4cda-8129-12c5e1565073","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d31a2d7-9ccf-4cda-8129-12c5e1565073","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d31a2d7-9ccf-4cda-8129-12c5e1565073","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d31a2d7-9ccf-4cda-8129-12c5e1565073","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d31a2d7-9ccf-4cda-8129-12c5e1565073","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d31a2d7-9ccf-4cda-8129-12c5e1565073","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/auth-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d31a2d7-9ccf-4cda-8129-12c5e1565073","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d31a2d7-9ccf-4cda-8129-12c5e1565073","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d31a2d7-9ccf-4cda-8129-12c5e1565073","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d31a2d7-9ccf-4cda-8129-12c5e1565073","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d31a2d7-9ccf-4cda-8129-12c5e1565073","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee36d1a4-575a-9b7a-a81c-0b788563ca50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58058","PortSpecifier":{"PortValue":58058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee36d1a4-575a-9b7a-a81c-0b788563ca50","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee36d1a4-575a-9b7a-a81c-0b788563ca50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58058","PortSpecifier":{"PortValue":58058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440375,"nanos":522320111},"http":{"id":"ee36d1a4-575a-9b7a-a81c-0b788563ca50","method":"POST","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ee36d1a4-575a-9b7a-a81c-0b788563ca50","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee36d1a4-575a-9b7a-a81c-0b788563ca50","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee36d1a4-575a-9b7a-a81c-0b788563ca50","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee36d1a4-575a-9b7a-a81c-0b788563ca50","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee36d1a4-575a-9b7a-a81c-0b788563ca50","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee36d1a4-575a-9b7a-a81c-0b788563ca50","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-82510b/auth-test-model-82510b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ee36d1a4-575a-9b7a-a81c-0b788563ca50","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee36d1a4-575a-9b7a-a81c-0b788563ca50","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee36d1a4-575a-9b7a-a81c-0b788563ca50","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee36d1a4-575a-9b7a-a81c-0b788563ca50","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee36d1a4-575a-9b7a-a81c-0b788563ca50","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c85f5b08-719e-45c3-82da-fd7113e89086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47594","PortSpecifier":{"PortValue":47594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c85f5b08-719e-45c3-82da-fd7113e89086","method":"GET","path":"/maas-api/v1/api-keys/373f3d9d-27ae-42de-8acb-50819a15fe80","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c85f5b08-719e-45c3-82da-fd7113e89086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47594","PortSpecifier":{"PortValue":47594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440375,"nanos":609605308},"http":{"id":"c85f5b08-719e-45c3-82da-fd7113e89086","method":"GET","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/373f3d9d-27ae-42de-8acb-50819a15fe80",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c85f5b08-719e-45c3-82da-fd7113e89086","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c85f5b08-719e-45c3-82da-fd7113e89086","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c85f5b08-719e-45c3-82da-fd7113e89086","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/373f3d9d-27ae-42de-8acb-50819a15fe80",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c85f5b08-719e-45c3-82da-fd7113e89086","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c85f5b08-719e-45c3-82da-fd7113e89086","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c85f5b08-719e-45c3-82da-fd7113e89086","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/auth-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c85f5b08-719e-45c3-82da-fd7113e89086","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c85f5b08-719e-45c3-82da-fd7113e89086","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c85f5b08-719e-45c3-82da-fd7113e89086","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c85f5b08-719e-45c3-82da-fd7113e89086","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c85f5b08-719e-45c3-82da-fd7113e89086","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"149fd19c-6e01-4c58-9bbe-4df0b38a97a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58070","PortSpecifier":{"PortValue":58070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"149fd19c-6e01-4c58-9bbe-4df0b38a97a1","method":"GET","path":"/maas-api/v1/api-keys/f762d2d8-92ec-4d12-aeef-e90dad2e9586","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"149fd19c-6e01-4c58-9bbe-4df0b38a97a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58070","PortSpecifier":{"PortValue":58070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440375,"nanos":649327519},"http":{"id":"149fd19c-6e01-4c58-9bbe-4df0b38a97a1","method":"GET","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f762d2d8-92ec-4d12-aeef-e90dad2e9586",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"149fd19c-6e01-4c58-9bbe-4df0b38a97a1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"149fd19c-6e01-4c58-9bbe-4df0b38a97a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"149fd19c-6e01-4c58-9bbe-4df0b38a97a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f762d2d8-92ec-4d12-aeef-e90dad2e9586",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149fd19c-6e01-4c58-9bbe-4df0b38a97a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149fd19c-6e01-4c58-9bbe-4df0b38a97a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149fd19c-6e01-4c58-9bbe-4df0b38a97a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-82510b/auth-test-model-82510b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"149fd19c-6e01-4c58-9bbe-4df0b38a97a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149fd19c-6e01-4c58-9bbe-4df0b38a97a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149fd19c-6e01-4c58-9bbe-4df0b38a97a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"149fd19c-6e01-4c58-9bbe-4df0b38a97a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"149fd19c-6e01-4c58-9bbe-4df0b38a97a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6c82f6e-1987-4b6c-8093-44d4422a2196","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54392","PortSpecifier":{"PortValue":54392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6c82f6e-1987-4b6c-8093-44d4422a2196","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6c82f6e-1987-4b6c-8093-44d4422a2196","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54392","PortSpecifier":{"PortValue":54392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440397,"nanos":924868915},"http":{"id":"a6c82f6e-1987-4b6c-8093-44d4422a2196","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a6c82f6e-1987-4b6c-8093-44d4422a2196","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6c82f6e-1987-4b6c-8093-44d4422a2196","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6c82f6e-1987-4b6c-8093-44d4422a2196","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6c82f6e-1987-4b6c-8093-44d4422a2196","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6c82f6e-1987-4b6c-8093-44d4422a2196","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6c82f6e-1987-4b6c-8093-44d4422a2196","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/auth-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a6c82f6e-1987-4b6c-8093-44d4422a2196","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6c82f6e-1987-4b6c-8093-44d4422a2196","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6c82f6e-1987-4b6c-8093-44d4422a2196","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6c82f6e-1987-4b6c-8093-44d4422a2196","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6c82f6e-1987-4b6c-8093-44d4422a2196","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"506accc5-a91c-470c-ac66-e99c00e5fd48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35380","PortSpecifier":{"PortValue":35380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"506accc5-a91c-470c-ac66-e99c00e5fd48","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"506accc5-a91c-470c-ac66-e99c00e5fd48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35380","PortSpecifier":{"PortValue":35380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440397,"nanos":965210543},"http":{"id":"506accc5-a91c-470c-ac66-e99c00e5fd48","method":"POST","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"506accc5-a91c-470c-ac66-e99c00e5fd48","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"506accc5-a91c-470c-ac66-e99c00e5fd48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"506accc5-a91c-470c-ac66-e99c00e5fd48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"506accc5-a91c-470c-ac66-e99c00e5fd48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"506accc5-a91c-470c-ac66-e99c00e5fd48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"506accc5-a91c-470c-ac66-e99c00e5fd48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-82510b/auth-test-model-82510b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"506accc5-a91c-470c-ac66-e99c00e5fd48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"506accc5-a91c-470c-ac66-e99c00e5fd48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"506accc5-a91c-470c-ac66-e99c00e5fd48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"506accc5-a91c-470c-ac66-e99c00e5fd48","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:06:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"506accc5-a91c-470c-ac66-e99c00e5fd48","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:06:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5a90608-bcff-453e-82dc-bc41adb7863a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54400","PortSpecifier":{"PortValue":54400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5a90608-bcff-453e-82dc-bc41adb7863a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:06:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5a90608-bcff-453e-82dc-bc41adb7863a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54400","PortSpecifier":{"PortValue":54400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440398,"nanos":11384598},"http":{"id":"b5a90608-bcff-453e-82dc-bc41adb7863a","method":"GET","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5a90608-bcff-453e-82dc-bc41adb7863a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oUrIULOerTPL3Knc_gfwk9DodFdLIuYsIsDlmkGzXdsfo0yDu8gzgAJT4E9F"}
{"level":"debug","ts":"2026-07-07T16:06:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5a90608-bcff-453e-82dc-bc41adb7863a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oUrIULOerTPL3Knc_gfwk9DodFdLIuYsIsDlmkGzXdsfo0yDu8gzgAJT4E9F\"}"}
{"level":"debug","ts":"2026-07-07T16:06:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5a90608-bcff-453e-82dc-bc41adb7863a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56fa938b-4070-4ac9-9414-8efa23daadf7","keyName":"e2e-auth-iso-a-5242f2","subscription":"e2e-auth-iso-3b558f","tenant":"e2e-shared-a-4e777d","userId":"56fa938b-4070-4ac9-9414-8efa23daadf7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5a90608-bcff-453e-82dc-bc41adb7863a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5a90608-bcff-453e-82dc-bc41adb7863a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5a90608-bcff-453e-82dc-bc41adb7863a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5a90608-bcff-453e-82dc-bc41adb7863a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/auth-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5a90608-bcff-453e-82dc-bc41adb7863a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5a90608-bcff-453e-82dc-bc41adb7863a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5a90608-bcff-453e-82dc-bc41adb7863a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5a90608-bcff-453e-82dc-bc41adb7863a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3b558f"}
{"level":"info","ts":"2026-07-07T16:06:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5a90608-bcff-453e-82dc-bc41adb7863a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:06:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5a90608-bcff-453e-82dc-bc41adb7863a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d7d2a97-d548-4589-bf25-c78189ff35a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38394","PortSpecifier":{"PortValue":38394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d7d2a97-d548-4589-bf25-c78189ff35a1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d7d2a97-d548-4589-bf25-c78189ff35a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38394","PortSpecifier":{"PortValue":38394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440413,"nanos":57793599},"http":{"id":"3d7d2a97-d548-4589-bf25-c78189ff35a1","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d7d2a97-d548-4589-bf25-c78189ff35a1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d7d2a97-d548-4589-bf25-c78189ff35a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d7d2a97-d548-4589-bf25-c78189ff35a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d7d2a97-d548-4589-bf25-c78189ff35a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d7d2a97-d548-4589-bf25-c78189ff35a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d7d2a97-d548-4589-bf25-c78189ff35a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/auth-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d7d2a97-d548-4589-bf25-c78189ff35a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d7d2a97-d548-4589-bf25-c78189ff35a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d7d2a97-d548-4589-bf25-c78189ff35a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d7d2a97-d548-4589-bf25-c78189ff35a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d7d2a97-d548-4589-bf25-c78189ff35a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f46f6c94-ea1f-495c-ba7b-97079c3837d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54622","PortSpecifier":{"PortValue":54622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f46f6c94-ea1f-495c-ba7b-97079c3837d7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f46f6c94-ea1f-495c-ba7b-97079c3837d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54622","PortSpecifier":{"PortValue":54622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440413,"nanos":98939704},"http":{"id":"f46f6c94-ea1f-495c-ba7b-97079c3837d7","method":"POST","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f46f6c94-ea1f-495c-ba7b-97079c3837d7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f46f6c94-ea1f-495c-ba7b-97079c3837d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f46f6c94-ea1f-495c-ba7b-97079c3837d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f46f6c94-ea1f-495c-ba7b-97079c3837d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f46f6c94-ea1f-495c-ba7b-97079c3837d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f46f6c94-ea1f-495c-ba7b-97079c3837d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-82510b/auth-test-model-82510b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f46f6c94-ea1f-495c-ba7b-97079c3837d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f46f6c94-ea1f-495c-ba7b-97079c3837d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f46f6c94-ea1f-495c-ba7b-97079c3837d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f46f6c94-ea1f-495c-ba7b-97079c3837d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f46f6c94-ea1f-495c-ba7b-97079c3837d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e4f7849-17a5-4f44-8df0-8e107ca300a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54636","PortSpecifier":{"PortValue":54636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e4f7849-17a5-4f44-8df0-8e107ca300a6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e4f7849-17a5-4f44-8df0-8e107ca300a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54636","PortSpecifier":{"PortValue":54636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440413,"nanos":142352327},"http":{"id":"0e4f7849-17a5-4f44-8df0-8e107ca300a6","method":"GET","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e4f7849-17a5-4f44-8df0-8e107ca300a6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eFKbqtLqX8YKYqMR_9c9XQ7mQEB1OAWcmMT22HELG3AtEQn8CSMaGiqpQ04U"}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e4f7849-17a5-4f44-8df0-8e107ca300a6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-82510b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eFKbqtLqX8YKYqMR_9c9XQ7mQEB1OAWcmMT22HELG3AtEQn8CSMaGiqpQ04U\"}"}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e4f7849-17a5-4f44-8df0-8e107ca300a6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-82510b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e4f7849-17a5-4f44-8df0-8e107ca300a6","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e4f7849-17a5-4f44-8df0-8e107ca300a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"0e4f7849-17a5-4f44-8df0-8e107ca300a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e4f7849-17a5-4f44-8df0-8e107ca300a6","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T16:06:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e4f7849-17a5-4f44-8df0-8e107ca300a6","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a067808a-247d-4aea-850e-12ca06868ce6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43774","PortSpecifier":{"PortValue":43774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a067808a-247d-4aea-850e-12ca06868ce6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a067808a-247d-4aea-850e-12ca06868ce6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43774","PortSpecifier":{"PortValue":43774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440430,"nanos":308588907},"http":{"id":"a067808a-247d-4aea-850e-12ca06868ce6","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a067808a-247d-4aea-850e-12ca06868ce6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a067808a-247d-4aea-850e-12ca06868ce6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a067808a-247d-4aea-850e-12ca06868ce6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a067808a-247d-4aea-850e-12ca06868ce6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a067808a-247d-4aea-850e-12ca06868ce6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a067808a-247d-4aea-850e-12ca06868ce6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/auth-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a067808a-247d-4aea-850e-12ca06868ce6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a067808a-247d-4aea-850e-12ca06868ce6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a067808a-247d-4aea-850e-12ca06868ce6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a067808a-247d-4aea-850e-12ca06868ce6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a067808a-247d-4aea-850e-12ca06868ce6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8869c142-4623-431b-abe8-f3e341f303bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44650","PortSpecifier":{"PortValue":44650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8869c142-4623-431b-abe8-f3e341f303bf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8869c142-4623-431b-abe8-f3e341f303bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44650","PortSpecifier":{"PortValue":44650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440430,"nanos":345932977},"http":{"id":"8869c142-4623-431b-abe8-f3e341f303bf","method":"POST","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8869c142-4623-431b-abe8-f3e341f303bf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8869c142-4623-431b-abe8-f3e341f303bf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8869c142-4623-431b-abe8-f3e341f303bf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8869c142-4623-431b-abe8-f3e341f303bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8869c142-4623-431b-abe8-f3e341f303bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8869c142-4623-431b-abe8-f3e341f303bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-82510b/auth-test-model-82510b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8869c142-4623-431b-abe8-f3e341f303bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8869c142-4623-431b-abe8-f3e341f303bf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8869c142-4623-431b-abe8-f3e341f303bf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8869c142-4623-431b-abe8-f3e341f303bf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8869c142-4623-431b-abe8-f3e341f303bf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"402957f1-3162-40cd-b634-573abf8c2ce4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43776","PortSpecifier":{"PortValue":43776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"402957f1-3162-40cd-b634-573abf8c2ce4","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"402957f1-3162-40cd-b634-573abf8c2ce4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43776","PortSpecifier":{"PortValue":43776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440430,"nanos":383788102},"http":{"id":"402957f1-3162-40cd-b634-573abf8c2ce4","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"402957f1-3162-40cd-b634-573abf8c2ce4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"402957f1-3162-40cd-b634-573abf8c2ce4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"402957f1-3162-40cd-b634-573abf8c2ce4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"402957f1-3162-40cd-b634-573abf8c2ce4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"402957f1-3162-40cd-b634-573abf8c2ce4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"402957f1-3162-40cd-b634-573abf8c2ce4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/auth-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"402957f1-3162-40cd-b634-573abf8c2ce4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"402957f1-3162-40cd-b634-573abf8c2ce4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"402957f1-3162-40cd-b634-573abf8c2ce4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"402957f1-3162-40cd-b634-573abf8c2ce4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"402957f1-3162-40cd-b634-573abf8c2ce4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dadf0de6-e4b8-498d-9f5a-b8411ed053ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44658","PortSpecifier":{"PortValue":44658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dadf0de6-e4b8-498d-9f5a-b8411ed053ca","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dadf0de6-e4b8-498d-9f5a-b8411ed053ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44658","PortSpecifier":{"PortValue":44658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440430,"nanos":432856188},"http":{"id":"dadf0de6-e4b8-498d-9f5a-b8411ed053ca","method":"POST","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dadf0de6-e4b8-498d-9f5a-b8411ed053ca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dadf0de6-e4b8-498d-9f5a-b8411ed053ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dadf0de6-e4b8-498d-9f5a-b8411ed053ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dadf0de6-e4b8-498d-9f5a-b8411ed053ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dadf0de6-e4b8-498d-9f5a-b8411ed053ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dadf0de6-e4b8-498d-9f5a-b8411ed053ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-82510b/auth-test-model-82510b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dadf0de6-e4b8-498d-9f5a-b8411ed053ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dadf0de6-e4b8-498d-9f5a-b8411ed053ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dadf0de6-e4b8-498d-9f5a-b8411ed053ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dadf0de6-e4b8-498d-9f5a-b8411ed053ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:07:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dadf0de6-e4b8-498d-9f5a-b8411ed053ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6dc920e9-1be9-489b-9e44-0a1067582992","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49228","PortSpecifier":{"PortValue":49228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6dc920e9-1be9-489b-9e44-0a1067582992","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6dc920e9-1be9-489b-9e44-0a1067582992","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49228","PortSpecifier":{"PortValue":49228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440445,"nanos":616739560},"http":{"id":"6dc920e9-1be9-489b-9e44-0a1067582992","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6dc920e9-1be9-489b-9e44-0a1067582992","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6dc920e9-1be9-489b-9e44-0a1067582992","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6dc920e9-1be9-489b-9e44-0a1067582992","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dc920e9-1be9-489b-9e44-0a1067582992","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dc920e9-1be9-489b-9e44-0a1067582992","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dc920e9-1be9-489b-9e44-0a1067582992","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/auth-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6dc920e9-1be9-489b-9e44-0a1067582992","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dc920e9-1be9-489b-9e44-0a1067582992","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dc920e9-1be9-489b-9e44-0a1067582992","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6dc920e9-1be9-489b-9e44-0a1067582992","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6dc920e9-1be9-489b-9e44-0a1067582992","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0243153-5506-4225-9497-55e5c46752b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36094","PortSpecifier":{"PortValue":36094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0243153-5506-4225-9497-55e5c46752b4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0243153-5506-4225-9497-55e5c46752b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36094","PortSpecifier":{"PortValue":36094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440445,"nanos":658467242},"http":{"id":"e0243153-5506-4225-9497-55e5c46752b4","method":"POST","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e0243153-5506-4225-9497-55e5c46752b4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0243153-5506-4225-9497-55e5c46752b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0243153-5506-4225-9497-55e5c46752b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0243153-5506-4225-9497-55e5c46752b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0243153-5506-4225-9497-55e5c46752b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0243153-5506-4225-9497-55e5c46752b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-82510b/auth-test-model-82510b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e0243153-5506-4225-9497-55e5c46752b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0243153-5506-4225-9497-55e5c46752b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0243153-5506-4225-9497-55e5c46752b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0243153-5506-4225-9497-55e5c46752b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0243153-5506-4225-9497-55e5c46752b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b85f435-6791-4ac4-bb10-15446555b407","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36110","PortSpecifier":{"PortValue":36110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b85f435-6791-4ac4-bb10-15446555b407","method":"GET","path":"/maas-api/v1/api-keys/daabc219-09f6-4375-9f55-86a49d4608d2","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b85f435-6791-4ac4-bb10-15446555b407","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36110","PortSpecifier":{"PortValue":36110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440445,"nanos":693940228},"http":{"id":"5b85f435-6791-4ac4-bb10-15446555b407","method":"GET","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/daabc219-09f6-4375-9f55-86a49d4608d2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5b85f435-6791-4ac4-bb10-15446555b407","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b85f435-6791-4ac4-bb10-15446555b407","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b85f435-6791-4ac4-bb10-15446555b407","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/daabc219-09f6-4375-9f55-86a49d4608d2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b85f435-6791-4ac4-bb10-15446555b407","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b85f435-6791-4ac4-bb10-15446555b407","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b85f435-6791-4ac4-bb10-15446555b407","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-82510b/auth-test-model-82510b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5b85f435-6791-4ac4-bb10-15446555b407","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b85f435-6791-4ac4-bb10-15446555b407","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b85f435-6791-4ac4-bb10-15446555b407","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b85f435-6791-4ac4-bb10-15446555b407","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b85f435-6791-4ac4-bb10-15446555b407","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caba6cbd-79af-4081-9942-02df6d6ac7d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49242","PortSpecifier":{"PortValue":49242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"caba6cbd-79af-4081-9942-02df6d6ac7d8","method":"GET","path":"/maas-api/v1/api-keys/daabc219-09f6-4375-9f55-86a49d4608d2","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caba6cbd-79af-4081-9942-02df6d6ac7d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49242","PortSpecifier":{"PortValue":49242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440445,"nanos":731474589},"http":{"id":"caba6cbd-79af-4081-9942-02df6d6ac7d8","method":"GET","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/daabc219-09f6-4375-9f55-86a49d4608d2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"caba6cbd-79af-4081-9942-02df6d6ac7d8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"caba6cbd-79af-4081-9942-02df6d6ac7d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"caba6cbd-79af-4081-9942-02df6d6ac7d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/daabc219-09f6-4375-9f55-86a49d4608d2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caba6cbd-79af-4081-9942-02df6d6ac7d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caba6cbd-79af-4081-9942-02df6d6ac7d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caba6cbd-79af-4081-9942-02df6d6ac7d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/auth-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"caba6cbd-79af-4081-9942-02df6d6ac7d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caba6cbd-79af-4081-9942-02df6d6ac7d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caba6cbd-79af-4081-9942-02df6d6ac7d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caba6cbd-79af-4081-9942-02df6d6ac7d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:07:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caba6cbd-79af-4081-9942-02df6d6ac7d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b722d1b7-2d11-40e7-bbe6-802f9188f251","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58922","PortSpecifier":{"PortValue":58922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b722d1b7-2d11-40e7-bbe6-802f9188f251","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b722d1b7-2d11-40e7-bbe6-802f9188f251","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58922","PortSpecifier":{"PortValue":58922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440460,"nanos":934848863},"http":{"id":"b722d1b7-2d11-40e7-bbe6-802f9188f251","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b722d1b7-2d11-40e7-bbe6-802f9188f251","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b722d1b7-2d11-40e7-bbe6-802f9188f251","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b722d1b7-2d11-40e7-bbe6-802f9188f251","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b722d1b7-2d11-40e7-bbe6-802f9188f251","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b722d1b7-2d11-40e7-bbe6-802f9188f251","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b722d1b7-2d11-40e7-bbe6-802f9188f251","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/auth-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b722d1b7-2d11-40e7-bbe6-802f9188f251","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b722d1b7-2d11-40e7-bbe6-802f9188f251","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b722d1b7-2d11-40e7-bbe6-802f9188f251","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b722d1b7-2d11-40e7-bbe6-802f9188f251","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b722d1b7-2d11-40e7-bbe6-802f9188f251","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7ceb87d-3465-4b01-8262-d8c07c52bbcc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37188","PortSpecifier":{"PortValue":37188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7ceb87d-3465-4b01-8262-d8c07c52bbcc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7ceb87d-3465-4b01-8262-d8c07c52bbcc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37188","PortSpecifier":{"PortValue":37188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440460,"nanos":973288530},"http":{"id":"f7ceb87d-3465-4b01-8262-d8c07c52bbcc","method":"POST","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7ceb87d-3465-4b01-8262-d8c07c52bbcc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7ceb87d-3465-4b01-8262-d8c07c52bbcc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7ceb87d-3465-4b01-8262-d8c07c52bbcc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7ceb87d-3465-4b01-8262-d8c07c52bbcc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7ceb87d-3465-4b01-8262-d8c07c52bbcc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7ceb87d-3465-4b01-8262-d8c07c52bbcc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-82510b/auth-test-model-82510b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7ceb87d-3465-4b01-8262-d8c07c52bbcc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7ceb87d-3465-4b01-8262-d8c07c52bbcc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7ceb87d-3465-4b01-8262-d8c07c52bbcc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7ceb87d-3465-4b01-8262-d8c07c52bbcc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7ceb87d-3465-4b01-8262-d8c07c52bbcc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:07:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08fc4106-a46d-4393-b384-b3208406ca68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58926","PortSpecifier":{"PortValue":58926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08fc4106-a46d-4393-b384-b3208406ca68","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:07:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08fc4106-a46d-4393-b384-b3208406ca68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58926","PortSpecifier":{"PortValue":58926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440461,"nanos":13249112},"http":{"id":"08fc4106-a46d-4393-b384-b3208406ca68","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08fc4106-a46d-4393-b384-b3208406ca68","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18fpyrie0076Zr6jC_Mi6kf2e84ol5qHajw4HfZbHltZRxw6gCF7FaqsJ6Ew1"}
{"level":"debug","ts":"2026-07-07T16:07:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"08fc4106-a46d-4393-b384-b3208406ca68","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18fpyrie0076Zr6jC_Mi6kf2e84ol5qHajw4HfZbHltZRxw6gCF7FaqsJ6Ew1\"}"}
{"level":"debug","ts":"2026-07-07T16:07:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"08fc4106-a46d-4393-b384-b3208406ca68","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ef195820-7c5a-461a-b81d-76b691c23c84","keyName":"e2e-auth-iso-a-9fccf0","subscription":"e2e-auth-iso-eb0379","tenant":"e2e-shared-a-4e777d","userId":"ef195820-7c5a-461a-b81d-76b691c23c84","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08fc4106-a46d-4393-b384-b3208406ca68","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08fc4106-a46d-4393-b384-b3208406ca68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08fc4106-a46d-4393-b384-b3208406ca68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08fc4106-a46d-4393-b384-b3208406ca68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/auth-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08fc4106-a46d-4393-b384-b3208406ca68","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-eb0379"}
{"level":"debug","ts":"2026-07-07T16:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08fc4106-a46d-4393-b384-b3208406ca68","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08fc4106-a46d-4393-b384-b3208406ca68","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"08fc4106-a46d-4393-b384-b3208406ca68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T16:07:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08fc4106-a46d-4393-b384-b3208406ca68","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:07:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08fc4106-a46d-4393-b384-b3208406ca68","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82d3bba6f9b55a8e3955c826dd4823666282c7a18a5c540a4d216a45eb2330e8"}
{"level":"info","ts":"2026-07-07T16:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd6272cb8fda51459aff0f2f0eddc670e8ccf573350346cef062cb6532e3890a"}
{"level":"info","ts":"2026-07-07T16:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed3aeddd79886d91e759f4bc8cad9f53b48c4be895f62d83c08aabd2a81e1e19"}
{"level":"info","ts":"2026-07-07T16:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/764d6467fa0d60152b049ef14c9f70f8a342758a8defce10c051f2e3c6579a02"}
{"level":"info","ts":"2026-07-07T16:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9d8e49e3eeb8ed90c1ec8567603e005914175ec9304a2583cf5ccecc3d4543b"}
{"level":"info","ts":"2026-07-07T16:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75bdf4a084c6ba7a62a61ac87f0409873caecb8c2bf04b7d8a3b6275e0bc9847"}
{"level":"info","ts":"2026-07-07T16:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d695aacff73a5afee3287352f0e7165b64849decaca77ab4252118f3ad96b718"}
{"level":"info","ts":"2026-07-07T16:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9904293144bc173e288a8825cb862ed0805db22c87c38bb24dfc8082df2d23de"}
{"level":"info","ts":"2026-07-07T16:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aeb1b17d38ccc1c71fde3ca2c0680b1fdefac4ef7e6f40a561fda92bd7938e55"}
{"level":"info","ts":"2026-07-07T16:07:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ac368d974b3e839b57007405970c94f0e2854e574eb55af9002e55db2bbc66d"}
{"level":"info","ts":"2026-07-07T16:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/847c0e787e44eba1d3611eab07eda9d50f27ca17a914d5b0c1ca0034eeca30b5"}
{"level":"info","ts":"2026-07-07T16:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fef6c6da88518a2aca8de5e3ea574d568b4f9d80294ca583186d947ce204efbc"}
{"level":"info","ts":"2026-07-07T16:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/001431cf61710e6c32c773dc691556c21049bd4426d4d0b7ccd9cb08f0fc1a24"}
{"level":"info","ts":"2026-07-07T16:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a89eb06e3b093e8654317ade352a7a45c171a5fb36d5222518c0b760db063700"}
{"level":"info","ts":"2026-07-07T16:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d4646197d7a17eee509dfef132f620fe9690a9bcf5005624bdb0f3671844473"}
{"level":"info","ts":"2026-07-07T16:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8853ca37086b580ffaf2dcfce0fc3b686b34ac2db0ee73f37cffab303c3f84ee"}
{"level":"debug","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6"}
{"level":"info","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6"}
{"level":"debug","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6"}
{"level":"debug","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:07:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:07:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6"}
{"level":"debug","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6"}
{"level":"info","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:07:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:07:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57"}
{"level":"info","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57"}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6"}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57"}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b"}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57"}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b"}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57"}
{"level":"error","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b"}
{"level":"error","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef"}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b"}
{"level":"error","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef"}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef"}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a983ece02832956df5b306f74c605324019659bf99080e3c4ac2e7c106c7c7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a983ece02832956df5b306f74c605324019659bf99080e3c4ac2e7c106c7c7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b"}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a983ece02832956df5b306f74c605324019659bf99080e3c4ac2e7c106c7c7b"}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a983ece02832956df5b306f74c605324019659bf99080e3c4ac2e7c106c7c7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a983ece02832956df5b306f74c605324019659bf99080e3c4ac2e7c106c7c7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a983ece02832956df5b306f74c605324019659bf99080e3c4ac2e7c106c7c7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2"}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a983ece02832956df5b306f74c605324019659bf99080e3c4ac2e7c106c7c7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef"}
{"level":"error","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a983ece02832956df5b306f74c605324019659bf99080e3c4ac2e7c106c7c7b"}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2"}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77cbfe3db716aff0acc3fc6821a0e6425c97331ec2e6b987991995867da2ffeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77cbfe3db716aff0acc3fc6821a0e6425c97331ec2e6b987991995867da2ffeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77cbfe3db716aff0acc3fc6821a0e6425c97331ec2e6b987991995867da2ffeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77cbfe3db716aff0acc3fc6821a0e6425c97331ec2e6b987991995867da2ffeb"}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77cbfe3db716aff0acc3fc6821a0e6425c97331ec2e6b987991995867da2ffeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77cbfe3db716aff0acc3fc6821a0e6425c97331ec2e6b987991995867da2ffeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77cbfe3db716aff0acc3fc6821a0e6425c97331ec2e6b987991995867da2ffeb"}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77cbfe3db716aff0acc3fc6821a0e6425c97331ec2e6b987991995867da2ffeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77cbfe3db716aff0acc3fc6821a0e6425c97331ec2e6b987991995867da2ffeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77cbfe3db716aff0acc3fc6821a0e6425c97331ec2e6b987991995867da2ffeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"393d39b1a5419c7dda28d434c23c37d65b3fe566d774556d2ddded6d970d8b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"393d39b1a5419c7dda28d434c23c37d65b3fe566d774556d2ddded6d970d8b8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77cbfe3db716aff0acc3fc6821a0e6425c97331ec2e6b987991995867da2ffeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"393d39b1a5419c7dda28d434c23c37d65b3fe566d774556d2ddded6d970d8b8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/393d39b1a5419c7dda28d434c23c37d65b3fe566d774556d2ddded6d970d8b8e"}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"393d39b1a5419c7dda28d434c23c37d65b3fe566d774556d2ddded6d970d8b8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:07:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["393d39b1a5419c7dda28d434c23c37d65b3fe566d774556d2ddded6d970d8b8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"393d39b1a5419c7dda28d434c23c37d65b3fe566d774556d2ddded6d970d8b8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"393d39b1a5419c7dda28d434c23c37d65b3fe566d774556d2ddded6d970d8b8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77cbfe3db716aff0acc3fc6821a0e6425c97331ec2e6b987991995867da2ffeb"}
{"level":"info","ts":"2026-07-07T16:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/393d39b1a5419c7dda28d434c23c37d65b3fe566d774556d2ddded6d970d8b8e"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d"}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"debug","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d"}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2"}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2"}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4"}
{"level":"error","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4"}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"debug","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"debug","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:08:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:08:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"debug","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"debug","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:08:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:08:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d"}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2"}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2"}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2"}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d"}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2"}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d"}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef"}
{"level":"debug","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2"}
{"level":"info","ts":"2026-07-07T16:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a983ece02832956df5b306f74c605324019659bf99080e3c4ac2e7c106c7c7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a983ece02832956df5b306f74c605324019659bf99080e3c4ac2e7c106c7c7b"}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"error","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57"}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77cbfe3db716aff0acc3fc6821a0e6425c97331ec2e6b987991995867da2ffeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57"}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2"}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77cbfe3db716aff0acc3fc6821a0e6425c97331ec2e6b987991995867da2ffeb"}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"393d39b1a5419c7dda28d434c23c37d65b3fe566d774556d2ddded6d970d8b8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6"}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db"}
{"level":"debug","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/393d39b1a5419c7dda28d434c23c37d65b3fe566d774556d2ddded6d970d8b8e"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b"}
{"level":"info","ts":"2026-07-07T16:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e"}
{"level":"info","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34a21a80-0b64-49a4-9d0a-6b89e61cba9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33176","PortSpecifier":{"PortValue":33176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34a21a80-0b64-49a4-9d0a-6b89e61cba9f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34a21a80-0b64-49a4-9d0a-6b89e61cba9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33176","PortSpecifier":{"PortValue":33176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440555,"nanos":884710151},"http":{"id":"34a21a80-0b64-49a4-9d0a-6b89e61cba9f","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34a21a80-0b64-49a4-9d0a-6b89e61cba9f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34a21a80-0b64-49a4-9d0a-6b89e61cba9f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34a21a80-0b64-49a4-9d0a-6b89e61cba9f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a21a80-0b64-49a4-9d0a-6b89e61cba9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a21a80-0b64-49a4-9d0a-6b89e61cba9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a21a80-0b64-49a4-9d0a-6b89e61cba9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/sub-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34a21a80-0b64-49a4-9d0a-6b89e61cba9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34a21a80-0b64-49a4-9d0a-6b89e61cba9f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34a21a80-0b64-49a4-9d0a-6b89e61cba9f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34a21a80-0b64-49a4-9d0a-6b89e61cba9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34a21a80-0b64-49a4-9d0a-6b89e61cba9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"359b877e-c1a6-4148-ad1d-dbe4d1232917","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43264","PortSpecifier":{"PortValue":43264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"359b877e-c1a6-4148-ad1d-dbe4d1232917","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"359b877e-c1a6-4148-ad1d-dbe4d1232917","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43264","PortSpecifier":{"PortValue":43264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440555,"nanos":929253229},"http":{"id":"359b877e-c1a6-4148-ad1d-dbe4d1232917","method":"POST","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"359b877e-c1a6-4148-ad1d-dbe4d1232917","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"359b877e-c1a6-4148-ad1d-dbe4d1232917","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"359b877e-c1a6-4148-ad1d-dbe4d1232917","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"359b877e-c1a6-4148-ad1d-dbe4d1232917","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"359b877e-c1a6-4148-ad1d-dbe4d1232917","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"359b877e-c1a6-4148-ad1d-dbe4d1232917","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-82510b/sub-test-model-82510b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"359b877e-c1a6-4148-ad1d-dbe4d1232917","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"359b877e-c1a6-4148-ad1d-dbe4d1232917","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"359b877e-c1a6-4148-ad1d-dbe4d1232917","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"359b877e-c1a6-4148-ad1d-dbe4d1232917","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"359b877e-c1a6-4148-ad1d-dbe4d1232917","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33178","PortSpecifier":{"PortValue":33178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33178","PortSpecifier":{"PortValue":33178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440555,"nanos":967742074},"http":{"id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","method":"GET","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VGWWNzQ89xKJbYY0_8vibzDvTef6uOHiZQWXYxl8m25vPzhAAlxEQdINAdKa"}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VGWWNzQ89xKJbYY0_8vibzDvTef6uOHiZQWXYxl8m25vPzhAAlxEQdINAdKa\"}"}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c700e2b3-78ee-4dea-956e-8107a685249f","keyName":"e2e-sub-iso-af7e8b","subscription":"e2e-a-only-dce9be","tenant":"e2e-shared-a-4e777d","userId":"c700e2b3-78ee-4dea-956e-8107a685249f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/sub-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-dce9be"}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:09:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3e2af09-b301-473f-b9b0-d9a1d422a168","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:09:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"580e6c2c-dc18-4473-904e-871384f0c06d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43278","PortSpecifier":{"PortValue":43278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"580e6c2c-dc18-4473-904e-871384f0c06d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:09:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"580e6c2c-dc18-4473-904e-871384f0c06d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43278","PortSpecifier":{"PortValue":43278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440556,"nanos":14100910},"http":{"id":"580e6c2c-dc18-4473-904e-871384f0c06d","method":"GET","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:09:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"580e6c2c-dc18-4473-904e-871384f0c06d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AmfP13fmXSN6MQHr_UnUw8eCYj1MoSrJmgBI0QBmDjHKt2wYwGG2xHqjGzdv"}
{"level":"debug","ts":"2026-07-07T16:09:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"580e6c2c-dc18-4473-904e-871384f0c06d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-82510b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AmfP13fmXSN6MQHr_UnUw8eCYj1MoSrJmgBI0QBmDjHKt2wYwGG2xHqjGzdv\"}"}
{"level":"debug","ts":"2026-07-07T16:09:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"580e6c2c-dc18-4473-904e-871384f0c06d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-82510b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ef3def6-1912-4844-9001-16708e0f7986","keyName":"e2e-sub-iso-1bd32a","subscription":"e2e-b-only-dce9be","tenant":"e2e-shared-b-82510b","userId":"3ef3def6-1912-4844-9001-16708e0f7986","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:09:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"580e6c2c-dc18-4473-904e-871384f0c06d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:09:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"580e6c2c-dc18-4473-904e-871384f0c06d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"580e6c2c-dc18-4473-904e-871384f0c06d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"580e6c2c-dc18-4473-904e-871384f0c06d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-82510b/sub-test-model-82510b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"580e6c2c-dc18-4473-904e-871384f0c06d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:09:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"580e6c2c-dc18-4473-904e-871384f0c06d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:09:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"580e6c2c-dc18-4473-904e-871384f0c06d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-dce9be"}
{"level":"debug","ts":"2026-07-07T16:09:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"580e6c2c-dc18-4473-904e-871384f0c06d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:09:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"580e6c2c-dc18-4473-904e-871384f0c06d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:09:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"580e6c2c-dc18-4473-904e-871384f0c06d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3b13b00-16d4-443c-86a7-9ecb24c4d5a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53828","PortSpecifier":{"PortValue":53828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3b13b00-16d4-443c-86a7-9ecb24c4d5a7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3b13b00-16d4-443c-86a7-9ecb24c4d5a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53828","PortSpecifier":{"PortValue":53828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440572,"nanos":662763894},"http":{"id":"a3b13b00-16d4-443c-86a7-9ecb24c4d5a7","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a3b13b00-16d4-443c-86a7-9ecb24c4d5a7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3b13b00-16d4-443c-86a7-9ecb24c4d5a7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3b13b00-16d4-443c-86a7-9ecb24c4d5a7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3b13b00-16d4-443c-86a7-9ecb24c4d5a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3b13b00-16d4-443c-86a7-9ecb24c4d5a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3b13b00-16d4-443c-86a7-9ecb24c4d5a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/sub-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3b13b00-16d4-443c-86a7-9ecb24c4d5a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3b13b00-16d4-443c-86a7-9ecb24c4d5a7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3b13b00-16d4-443c-86a7-9ecb24c4d5a7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3b13b00-16d4-443c-86a7-9ecb24c4d5a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3b13b00-16d4-443c-86a7-9ecb24c4d5a7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26ce67e2-dec7-40af-85ce-79a2daae6bc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44198","PortSpecifier":{"PortValue":44198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26ce67e2-dec7-40af-85ce-79a2daae6bc8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26ce67e2-dec7-40af-85ce-79a2daae6bc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44198","PortSpecifier":{"PortValue":44198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440572,"nanos":702423270},"http":{"id":"26ce67e2-dec7-40af-85ce-79a2daae6bc8","method":"POST","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"26ce67e2-dec7-40af-85ce-79a2daae6bc8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26ce67e2-dec7-40af-85ce-79a2daae6bc8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26ce67e2-dec7-40af-85ce-79a2daae6bc8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26ce67e2-dec7-40af-85ce-79a2daae6bc8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26ce67e2-dec7-40af-85ce-79a2daae6bc8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26ce67e2-dec7-40af-85ce-79a2daae6bc8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-82510b/sub-test-model-82510b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"26ce67e2-dec7-40af-85ce-79a2daae6bc8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26ce67e2-dec7-40af-85ce-79a2daae6bc8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26ce67e2-dec7-40af-85ce-79a2daae6bc8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26ce67e2-dec7-40af-85ce-79a2daae6bc8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26ce67e2-dec7-40af-85ce-79a2daae6bc8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53844","PortSpecifier":{"PortValue":53844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53844","PortSpecifier":{"PortValue":53844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440572,"nanos":740955889},"http":{"id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ONrWVwniA3SliBdb_3BfARcJRVUI5zjuW5EXg110MwlDyy7sdPqlaWHa7R5S"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ONrWVwniA3SliBdb_3BfARcJRVUI5zjuW5EXg110MwlDyy7sdPqlaWHa7R5S\"}"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3dbe9f64-0ae2-422e-bd91-cfdd3559a8cc","keyName":"e2e-sub-iso-b39b22","subscription":"e2e-shared-sub-4fbdd6","tenant":"e2e-shared-a-4e777d","userId":"3dbe9f64-0ae2-422e-bd91-cfdd3559a8cc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/sub-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-4fbdd6"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d698ed9c-d39b-4d0a-b3bd-5d71c091819f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44200","PortSpecifier":{"PortValue":44200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44200","PortSpecifier":{"PortValue":44200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440572,"nanos":773598333},"http":{"id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","method":"POST","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-40bfwFYWdTIkgTzD_qclhpONifvJVVaWTaif2bDQMbPmne6Jpwj53J40U1PP"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-82510b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-40bfwFYWdTIkgTzD_qclhpONifvJVVaWTaif2bDQMbPmne6Jpwj53J40U1PP\"}"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-82510b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ecdb0741-29bf-410d-b412-0f75be4f324f","keyName":"e2e-sub-iso-90f512","subscription":"e2e-shared-sub-4fbdd6","tenant":"e2e-shared-b-82510b","userId":"ecdb0741-29bf-410d-b412-0f75be4f324f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-82510b/sub-test-model-82510b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-4fbdd6"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:09:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4afe9e9d-cfa1-41f0-a97c-5faa057e7cc2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/297bc5fac4a1f95b655e82ca49a81c15d2fdce02db0c42db7a9b29ff13cc0e00"}
{"level":"info","ts":"2026-07-07T16:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88eb62aa508b0e91b180b2720952c274e5ac4501efed00d9e91bab8ce99c76e6"}
{"level":"info","ts":"2026-07-07T16:09:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb999b7b79a8413f87a7e5268142e475e20ba1bb400b02b041a6c3963f6f2bc0"}
{"level":"info","ts":"2026-07-07T16:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9e2db0fa6e55e9ce9687eef54c9d4574ef5dc074ce8d5e37c5585bdadde570b"}
{"level":"info","ts":"2026-07-07T16:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a898c6fe316495a5f4684821e504056e897a4c92444f268edf8c2b9c2260f57"}
{"level":"info","ts":"2026-07-07T16:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abf59475389dbc318cbd1c47497422593efc400b36873f6df8383b90118c99c2"}
{"level":"info","ts":"2026-07-07T16:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b1995832534c83dbc983aaa1f31500cd1dcb428c889c07b524156202d29dc3d"}
{"level":"info","ts":"2026-07-07T16:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77cbfe3db716aff0acc3fc6821a0e6425c97331ec2e6b987991995867da2ffeb"}
{"level":"info","ts":"2026-07-07T16:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69ced0cb721020e4f9100b7e25b78e365dfb11fd64249fc75b151bf8cf91b3ef"}
{"level":"info","ts":"2026-07-07T16:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd774983f65c6fc2ca4a8ad10bde0b5b6d231527a3f8a292da422cfd7bbaa81e"}
{"level":"info","ts":"2026-07-07T16:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15fd3bb18c28f49f123f3dd9da2c506cefe60e731e59058502c661ade9326fb3"}
{"level":"info","ts":"2026-07-07T16:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c78fbed9ea89cf590f7b45a37dbc496d9343d0f8506f7fc12d199cf9df77cb6d"}
{"level":"info","ts":"2026-07-07T16:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a983ece02832956df5b306f74c605324019659bf99080e3c4ac2e7c106c7c7b"}
{"level":"info","ts":"2026-07-07T16:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/393d39b1a5419c7dda28d434c23c37d65b3fe566d774556d2ddded6d970d8b8e"}
{"level":"info","ts":"2026-07-07T16:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2dccd5f3019e70424b2070888c0282640746c6f60c1f11a081138baec22585d4"}
{"level":"info","ts":"2026-07-07T16:09:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee2bdbb85fb69fad120c4074ebe06854a565197590d942a9edf01ba528eff0a2"}
{"level":"debug","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6"}
{"level":"debug","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6"}
{"level":"debug","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6"}
{"level":"info","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b"}
{"level":"info","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d"}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76777a0d78186287e5093f841003ebc619f07f743598d2964373e01bcf75980a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76777a0d78186287e5093f841003ebc619f07f743598d2964373e01bcf75980a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76777a0d78186287e5093f841003ebc619f07f743598d2964373e01bcf75980a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76777a0d78186287e5093f841003ebc619f07f743598d2964373e01bcf75980a"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76777a0d78186287e5093f841003ebc619f07f743598d2964373e01bcf75980a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76777a0d78186287e5093f841003ebc619f07f743598d2964373e01bcf75980a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76777a0d78186287e5093f841003ebc619f07f743598d2964373e01bcf75980a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76777a0d78186287e5093f841003ebc619f07f743598d2964373e01bcf75980a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76777a0d78186287e5093f841003ebc619f07f743598d2964373e01bcf75980a"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76777a0d78186287e5093f841003ebc619f07f743598d2964373e01bcf75980a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76777a0d78186287e5093f841003ebc619f07f743598d2964373e01bcf75980a"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8"}
{"level":"error","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8"}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8"}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee"}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee"}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee"}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee"}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f"}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f"}
{"level":"info","ts":"2026-07-07T16:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f"}
{"level":"debug","ts":"2026-07-07T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f"}
{"level":"debug","ts":"2026-07-07T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f"}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471"}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471"}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471"}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471"}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf"}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf"}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471"}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf"}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471"}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf"}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf"}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471"}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8"}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8"}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8"}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"}
{"level":"debug","ts":"2026-07-07T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8"}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662"}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662"}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d"}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d"}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d"}
{"level":"error","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee"}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76777a0d78186287e5093f841003ebc619f07f743598d2964373e01bcf75980a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76777a0d78186287e5093f841003ebc619f07f743598d2964373e01bcf75980a"}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed"}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed"}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed"}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed"}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed"}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf"}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf"}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d"}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d"}
{"level":"error","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d"}
{"level":"error","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d"}
{"level":"error","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d"}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db"}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6"}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78"}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8"}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T16:10:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"debug","ts":"2026-07-07T16:10:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"debug","ts":"2026-07-07T16:10:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T16:10:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T16:10:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T16:10:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T16:10:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T16:10:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"info","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0eb2c541-90e1-47ad-a9a6-0a3bd487306d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54472","PortSpecifier":{"PortValue":54472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0eb2c541-90e1-47ad-a9a6-0a3bd487306d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0eb2c541-90e1-47ad-a9a6-0a3bd487306d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54472","PortSpecifier":{"PortValue":54472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440636,"nanos":289556590},"http":{"id":"0eb2c541-90e1-47ad-a9a6-0a3bd487306d","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0eb2c541-90e1-47ad-a9a6-0a3bd487306d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0eb2c541-90e1-47ad-a9a6-0a3bd487306d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0eb2c541-90e1-47ad-a9a6-0a3bd487306d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0eb2c541-90e1-47ad-a9a6-0a3bd487306d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0eb2c541-90e1-47ad-a9a6-0a3bd487306d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0eb2c541-90e1-47ad-a9a6-0a3bd487306d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0eb2c541-90e1-47ad-a9a6-0a3bd487306d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0eb2c541-90e1-47ad-a9a6-0a3bd487306d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0eb2c541-90e1-47ad-a9a6-0a3bd487306d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0eb2c541-90e1-47ad-a9a6-0a3bd487306d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0eb2c541-90e1-47ad-a9a6-0a3bd487306d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b6ac71c-5761-410d-b52a-bb0c95e9a3b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60752","PortSpecifier":{"PortValue":60752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b6ac71c-5761-410d-b52a-bb0c95e9a3b2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b6ac71c-5761-410d-b52a-bb0c95e9a3b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60752","PortSpecifier":{"PortValue":60752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440636,"nanos":333029732},"http":{"id":"2b6ac71c-5761-410d-b52a-bb0c95e9a3b2","method":"POST","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b6ac71c-5761-410d-b52a-bb0c95e9a3b2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b6ac71c-5761-410d-b52a-bb0c95e9a3b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b6ac71c-5761-410d-b52a-bb0c95e9a3b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b6ac71c-5761-410d-b52a-bb0c95e9a3b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b6ac71c-5761-410d-b52a-bb0c95e9a3b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b6ac71c-5761-410d-b52a-bb0c95e9a3b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-82510b/rate-test-model-82510b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b6ac71c-5761-410d-b52a-bb0c95e9a3b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b6ac71c-5761-410d-b52a-bb0c95e9a3b2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b6ac71c-5761-410d-b52a-bb0c95e9a3b2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b6ac71c-5761-410d-b52a-bb0c95e9a3b2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b6ac71c-5761-410d-b52a-bb0c95e9a3b2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54474","PortSpecifier":{"PortValue":54474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","method":"POST","path":"/ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d/v1/completions","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54474","PortSpecifier":{"PortValue":54474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440636,"nanos":381249527},"http":{"id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ma66z0kBqs1q8FDu_MeIDq6vb9Xqv03n8WKnPXmOPLmT5VX2AdzPIpxKRKlg"}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ma66z0kBqs1q8FDu_MeIDq6vb9Xqv03n8WKnPXmOPLmT5VX2AdzPIpxKRKlg\"}"}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48525271-98b0-4ab6-87db-307ddb2ca27c","keyName":"e2e-rate-a-61ae0f","subscription":"e2e-rate-iso-a-61ae0f","tenant":"e2e-shared-a-4e777d","userId":"48525271-98b0-4ab6-87db-307ddb2ca27c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d\",\"requestedSubscription\":\"e2e-rate-iso-a-61ae0f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4e777d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ae0f","namespace":"ai-tenant-e2e-shared-a-4e777d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-61ae0f"}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48525271-98b0-4ab6-87db-307ddb2ca27c","keyName":"e2e-rate-a-61ae0f","selected_subscription":"e2e-rate-iso-a-61ae0f","selected_subscription_key":"ai-tenant-e2e-shared-a-4e777d/e2e-rate-iso-a-61ae0f@ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4e777d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ae0f","namespace":"ai-tenant-e2e-shared-a-4e777d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"120c9ca0-4c8c-4666-96ae-e8438ecde7e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54486","PortSpecifier":{"PortValue":54486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a90e1e21-dec5-4e68-9491-58851adb8b05","method":"POST","path":"/ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d/v1/completions","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54486","PortSpecifier":{"PortValue":54486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440637,"nanos":447341069},"http":{"id":"a90e1e21-dec5-4e68-9491-58851adb8b05","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ma66z0kBqs1q8FDu_MeIDq6vb9Xqv03n8WKnPXmOPLmT5VX2AdzPIpxKRKlg"}
{"level":"debug","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ma66z0kBqs1q8FDu_MeIDq6vb9Xqv03n8WKnPXmOPLmT5VX2AdzPIpxKRKlg\"}"}
{"level":"debug","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48525271-98b0-4ab6-87db-307ddb2ca27c","keyName":"e2e-rate-a-61ae0f","subscription":"e2e-rate-iso-a-61ae0f","tenant":"e2e-shared-a-4e777d","userId":"48525271-98b0-4ab6-87db-307ddb2ca27c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d\",\"requestedSubscription\":\"e2e-rate-iso-a-61ae0f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4e777d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ae0f","namespace":"ai-tenant-e2e-shared-a-4e777d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-61ae0f"}
{"level":"debug","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48525271-98b0-4ab6-87db-307ddb2ca27c","keyName":"e2e-rate-a-61ae0f","selected_subscription":"e2e-rate-iso-a-61ae0f","selected_subscription_key":"ai-tenant-e2e-shared-a-4e777d/e2e-rate-iso-a-61ae0f@ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4e777d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ae0f","namespace":"ai-tenant-e2e-shared-a-4e777d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:10:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a90e1e21-dec5-4e68-9491-58851adb8b05","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54490","PortSpecifier":{"PortValue":54490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","method":"POST","path":"/ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d/v1/completions","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54490","PortSpecifier":{"PortValue":54490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440638,"nanos":493174052},"http":{"id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ma66z0kBqs1q8FDu_MeIDq6vb9Xqv03n8WKnPXmOPLmT5VX2AdzPIpxKRKlg"}
{"level":"debug","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ma66z0kBqs1q8FDu_MeIDq6vb9Xqv03n8WKnPXmOPLmT5VX2AdzPIpxKRKlg\"}"}
{"level":"debug","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48525271-98b0-4ab6-87db-307ddb2ca27c","keyName":"e2e-rate-a-61ae0f","subscription":"e2e-rate-iso-a-61ae0f","tenant":"e2e-shared-a-4e777d","userId":"48525271-98b0-4ab6-87db-307ddb2ca27c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d\",\"requestedSubscription\":\"e2e-rate-iso-a-61ae0f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4e777d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ae0f","namespace":"ai-tenant-e2e-shared-a-4e777d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-61ae0f"}
{"level":"debug","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"48525271-98b0-4ab6-87db-307ddb2ca27c","keyName":"e2e-rate-a-61ae0f","selected_subscription":"e2e-rate-iso-a-61ae0f","selected_subscription_key":"ai-tenant-e2e-shared-a-4e777d/e2e-rate-iso-a-61ae0f@ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4e777d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-61ae0f","namespace":"ai-tenant-e2e-shared-a-4e777d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:10:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8f5add1-26fd-42e7-a4a3-e8bdff44ac77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10be913b-b7c9-4e21-95bb-1709f0507ce3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47646","PortSpecifier":{"PortValue":47646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10be913b-b7c9-4e21-95bb-1709f0507ce3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10be913b-b7c9-4e21-95bb-1709f0507ce3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47646","PortSpecifier":{"PortValue":47646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440652,"nanos":445951799},"http":{"id":"10be913b-b7c9-4e21-95bb-1709f0507ce3","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"10be913b-b7c9-4e21-95bb-1709f0507ce3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10be913b-b7c9-4e21-95bb-1709f0507ce3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10be913b-b7c9-4e21-95bb-1709f0507ce3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10be913b-b7c9-4e21-95bb-1709f0507ce3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10be913b-b7c9-4e21-95bb-1709f0507ce3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10be913b-b7c9-4e21-95bb-1709f0507ce3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"10be913b-b7c9-4e21-95bb-1709f0507ce3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10be913b-b7c9-4e21-95bb-1709f0507ce3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10be913b-b7c9-4e21-95bb-1709f0507ce3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10be913b-b7c9-4e21-95bb-1709f0507ce3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10be913b-b7c9-4e21-95bb-1709f0507ce3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"647c551e-7364-47b8-b6a9-f89460c4b964","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52922","PortSpecifier":{"PortValue":52922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"647c551e-7364-47b8-b6a9-f89460c4b964","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"647c551e-7364-47b8-b6a9-f89460c4b964","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52922","PortSpecifier":{"PortValue":52922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440652,"nanos":493024927},"http":{"id":"647c551e-7364-47b8-b6a9-f89460c4b964","method":"POST","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"647c551e-7364-47b8-b6a9-f89460c4b964","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"647c551e-7364-47b8-b6a9-f89460c4b964","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"]}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"647c551e-7364-47b8-b6a9-f89460c4b964","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6dbfa6a8d160"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1457df2-b901-4fe1-84d7-1a9dd2bc41b3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"20b84c2a-a041-466d-a036-9d94db7f3b2b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"647c551e-7364-47b8-b6a9-f89460c4b964","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"647c551e-7364-47b8-b6a9-f89460c4b964","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"647c551e-7364-47b8-b6a9-f89460c4b964","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-82510b/rate-test-model-82510b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"647c551e-7364-47b8-b6a9-f89460c4b964","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"647c551e-7364-47b8-b6a9-f89460c4b964","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"647c551e-7364-47b8-b6a9-f89460c4b964","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"647c551e-7364-47b8-b6a9-f89460c4b964","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"647c551e-7364-47b8-b6a9-f89460c4b964","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47654","PortSpecifier":{"PortValue":47654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cfda2a48-e42f-4d46-b315-e7baa94665af","method":"POST","path":"/ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d/v1/completions","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47654","PortSpecifier":{"PortValue":47654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440652,"nanos":532340691},"http":{"id":"cfda2a48-e42f-4d46-b315-e7baa94665af","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O4GstPwbLFheJohl_KZTJMYC30EyFXXTQA2OddAa9Hrufy9nQWMSJbwNNIPR"}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O4GstPwbLFheJohl_KZTJMYC30EyFXXTQA2OddAa9Hrufy9nQWMSJbwNNIPR\"}"}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75499de3-210c-44b1-b0e1-8fa3f8d64a08","keyName":"e2e-rate-a-168512","subscription":"e2e-rate-iso-a-168512","tenant":"e2e-shared-a-4e777d","userId":"75499de3-210c-44b1-b0e1-8fa3f8d64a08","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d\",\"requestedSubscription\":\"e2e-rate-iso-a-168512\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4e777d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-168512","namespace":"ai-tenant-e2e-shared-a-4e777d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-168512"}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75499de3-210c-44b1-b0e1-8fa3f8d64a08","keyName":"e2e-rate-a-168512","selected_subscription":"e2e-rate-iso-a-168512","selected_subscription_key":"ai-tenant-e2e-shared-a-4e777d/e2e-rate-iso-a-168512@ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4e777d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-168512","namespace":"ai-tenant-e2e-shared-a-4e777d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:10:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfda2a48-e42f-4d46-b315-e7baa94665af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47660","PortSpecifier":{"PortValue":47660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","method":"POST","path":"/ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d/v1/completions","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47660","PortSpecifier":{"PortValue":47660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440653,"nanos":571719527},"http":{"id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O4GstPwbLFheJohl_KZTJMYC30EyFXXTQA2OddAa9Hrufy9nQWMSJbwNNIPR"}
{"level":"debug","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O4GstPwbLFheJohl_KZTJMYC30EyFXXTQA2OddAa9Hrufy9nQWMSJbwNNIPR\"}"}
{"level":"debug","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75499de3-210c-44b1-b0e1-8fa3f8d64a08","keyName":"e2e-rate-a-168512","subscription":"e2e-rate-iso-a-168512","tenant":"e2e-shared-a-4e777d","userId":"75499de3-210c-44b1-b0e1-8fa3f8d64a08","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d\",\"requestedSubscription\":\"e2e-rate-iso-a-168512\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4e777d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-168512","namespace":"ai-tenant-e2e-shared-a-4e777d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-168512"}
{"level":"debug","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75499de3-210c-44b1-b0e1-8fa3f8d64a08","keyName":"e2e-rate-a-168512","selected_subscription":"e2e-rate-iso-a-168512","selected_subscription_key":"ai-tenant-e2e-shared-a-4e777d/e2e-rate-iso-a-168512@ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4e777d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-168512","namespace":"ai-tenant-e2e-shared-a-4e777d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:10:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b273cb16-4c78-414e-81b3-c17ef9f5b826","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"495566f7-601a-4e71-b309-69145a8dcb64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47668","PortSpecifier":{"PortValue":47668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"495566f7-601a-4e71-b309-69145a8dcb64","method":"POST","path":"/ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d/v1/completions","host":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"495566f7-601a-4e71-b309-69145a8dcb64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47668","PortSpecifier":{"PortValue":47668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440654,"nanos":610331605},"http":{"id":"495566f7-601a-4e71-b309-69145a8dcb64","method":"POST","headers":{":authority":"e2e-shared-a-4e777d.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"495566f7-601a-4e71-b309-69145a8dcb64","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O4GstPwbLFheJohl_KZTJMYC30EyFXXTQA2OddAa9Hrufy9nQWMSJbwNNIPR"}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"495566f7-601a-4e71-b309-69145a8dcb64","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O4GstPwbLFheJohl_KZTJMYC30EyFXXTQA2OddAa9Hrufy9nQWMSJbwNNIPR\"}"}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"495566f7-601a-4e71-b309-69145a8dcb64","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75499de3-210c-44b1-b0e1-8fa3f8d64a08","keyName":"e2e-rate-a-168512","subscription":"e2e-rate-iso-a-168512","tenant":"e2e-shared-a-4e777d","userId":"75499de3-210c-44b1-b0e1-8fa3f8d64a08","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"495566f7-601a-4e71-b309-69145a8dcb64","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d\",\"requestedSubscription\":\"e2e-rate-iso-a-168512\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"495566f7-601a-4e71-b309-69145a8dcb64","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4e777d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4e777d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-168512","namespace":"ai-tenant-e2e-shared-a-4e777d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"495566f7-601a-4e71-b309-69145a8dcb64","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"495566f7-601a-4e71-b309-69145a8dcb64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"495566f7-601a-4e71-b309-69145a8dcb64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"495566f7-601a-4e71-b309-69145a8dcb64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"495566f7-601a-4e71-b309-69145a8dcb64","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"495566f7-601a-4e71-b309-69145a8dcb64","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"495566f7-601a-4e71-b309-69145a8dcb64","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"495566f7-601a-4e71-b309-69145a8dcb64","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-168512"}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"495566f7-601a-4e71-b309-69145a8dcb64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75499de3-210c-44b1-b0e1-8fa3f8d64a08","keyName":"e2e-rate-a-168512","selected_subscription":"e2e-rate-iso-a-168512","selected_subscription_key":"ai-tenant-e2e-shared-a-4e777d/e2e-rate-iso-a-168512@ai-tenant-e2e-shared-a-4e777d/rate-test-model-4e777d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4e777d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-168512","namespace":"ai-tenant-e2e-shared-a-4e777d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"495566f7-601a-4e71-b309-69145a8dcb64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"495566f7-601a-4e71-b309-69145a8dcb64","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52930","PortSpecifier":{"PortValue":52930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","method":"POST","path":"/ai-tenant-e2e-shared-b-82510b/rate-test-model-82510b/v1/completions","host":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52930","PortSpecifier":{"PortValue":52930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783440654,"nanos":645924141},"http":{"id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","method":"POST","headers":{":authority":"e2e-shared-b-82510b.apps.3cddb4ad-9bd6-49f8-883b-6dbfa6a8d160.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-82510b/rate-test-model-82510b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eV44uUfhhvQmOrZX_Is4K2CfmOm0jVeTURNqEUL25z9qpCZ1CFJbRC2ysYwx"}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-82510b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eV44uUfhhvQmOrZX_Is4K2CfmOm0jVeTURNqEUL25z9qpCZ1CFJbRC2ysYwx\"}"}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-82510b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"419df8a4-d9e1-445c-a7b5-b0ebe1698ade","keyName":"e2e-rate-b-168512","subscription":"e2e-rate-iso-b-168512","tenant":"e2e-shared-b-82510b","userId":"419df8a4-d9e1-445c-a7b5-b0ebe1698ade","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-82510b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-82510b/rate-test-model-82510b\",\"requestedSubscription\":\"e2e-rate-iso-b-168512\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-82510b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-82510b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-168512","namespace":"ai-tenant-e2e-shared-b-82510b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-82510b/rate-test-model-82510b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-168512"}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"419df8a4-d9e1-445c-a7b5-b0ebe1698ade","keyName":"e2e-rate-b-168512","selected_subscription":"e2e-rate-iso-b-168512","selected_subscription_key":"ai-tenant-e2e-shared-b-82510b/e2e-rate-iso-b-168512@ai-tenant-e2e-shared-b-82510b/rate-test-model-82510b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-82510b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-168512","namespace":"ai-tenant-e2e-shared-b-82510b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T16:10:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d2b6d58-259a-49d0-9080-bb7081d6ab2f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdf06abe5a4284074eedc03969b99a8a9fb2ca97a262e88be8bd45e26efa0bad"}
{"level":"info","ts":"2026-07-07T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cab7f715e47f56b6845c2ec39bbfc25974ef454356194d67e5ac218eedeee78"}
{"level":"info","ts":"2026-07-07T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91d275a3b91ff723f89a0f65daa962c333b11815da376f363f43f819e9e46662"}
{"level":"info","ts":"2026-07-07T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d69cfdbbfe5fa2a276ab7994c3888e4164aaec7f802dc04a6ccc069d873651ed"}
{"level":"info","ts":"2026-07-07T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3169043c37f2486814efcb9baecb13b1db2b0803526ff36aece38cc73abec6ee"}
{"level":"info","ts":"2026-07-07T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d9df3fa57b7e71e9ba24ac4841ce9728c09796c647039bbf7301ff7b5219dd6"}
{"level":"info","ts":"2026-07-07T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00f5808acfe17263fb3b733f4921b1cffe6c6280d3b73b4a5c991d81ec4c376d"}
{"level":"info","ts":"2026-07-07T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f58d5d9119d7681099f278f35691956bd75fd950e6aad3746f0071c30e1d471"}
{"level":"info","ts":"2026-07-07T16:11:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98a0f8b8a0eb44aeaa8fd8a543db28fd8901425654624eff72a7d56f3b7254bf"}
{"level":"info","ts":"2026-07-07T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5724f78e90381c857f7430a8cdbe7103722ad0861f38f18120f38127afa8a83b"}
{"level":"info","ts":"2026-07-07T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/380c4ee4e6ba95eb29d7f86e1284b1e04b0e636c1898d15791cc8be4afb52a8c"}
{"level":"info","ts":"2026-07-07T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61e3099eae2e538b6bb32212b32b92ab7e6d15176dd95c55ff542934e004d8d8"}
{"level":"info","ts":"2026-07-07T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40d4f0e5a631ab3d9986df4b0b46bd7e8e820b9904527d2639f7ffd966c428f8"}
{"level":"info","ts":"2026-07-07T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84787dd2332afcb06d23c5dc91b5f35fc6d290d38fe99cd060e55031ecb53d6f"}
{"level":"info","ts":"2026-07-07T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2befe39930cffdadc09ae4ab0520851856219be41dd8e5faddc2cf5f3e4b1f6d"}
{"level":"info","ts":"2026-07-07T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80929f35cc668d79dfcdee2e2237973ee91ccfce3c222d0a17715aeb80e1086a"}
{"level":"info","ts":"2026-07-07T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76777a0d78186287e5093f841003ebc619f07f743598d2964373e01bcf75980a"}
{"level":"info","ts":"2026-07-07T16:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d386665de3769952e600a06af486b3e03661308290ae0f2dee78f72880bf149b"}
{"level":"info","ts":"2026-07-07T16:11:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73757e85349ce425041b3e83302c65d1c361dfb06d4f83f3524948b64813c133"}
{"level":"info","ts":"2026-07-07T16:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8c0f99b828c1a30d090b56cb363327cc217305d85716385d4ea7317fd0d29db"}