--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-07T19:23:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"error","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"info","ts":"2026-07-07T19:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f1da56e25d82ef74fe61114354b05a6c612c24227c9a367314529f469072d56"}
{"level":"info","ts":"2026-07-07T19:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4806fec156a08ee233b8bd7c1998de400531030ccb56b79fff7fcdd71c79569a"}
{"level":"info","ts":"2026-07-07T19:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0640bacbc7c9b2513995f86892f95b458b3cf10e864d65b7b5649164eb093cb6"}
{"level":"info","ts":"2026-07-07T19:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce18312893604ff69d444aad29d07f5141b4dea0134bd0727c1c1ead88c446b4"}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e"}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e"}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e"}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e"}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e"}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b"}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b"}
{"level":"error","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b"}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b"}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"503a1a69bd745b1bae8c438fabbd49105da5756331aaf393154240929a1934af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/503a1a69bd745b1bae8c438fabbd49105da5756331aaf393154240929a1934af"}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"503a1a69bd745b1bae8c438fabbd49105da5756331aaf393154240929a1934af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"503a1a69bd745b1bae8c438fabbd49105da5756331aaf393154240929a1934af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["503a1a69bd745b1bae8c438fabbd49105da5756331aaf393154240929a1934af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"503a1a69bd745b1bae8c438fabbd49105da5756331aaf393154240929a1934af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/503a1a69bd745b1bae8c438fabbd49105da5756331aaf393154240929a1934af"}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"503a1a69bd745b1bae8c438fabbd49105da5756331aaf393154240929a1934af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/503a1a69bd745b1bae8c438fabbd49105da5756331aaf393154240929a1934af"}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb"}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"}
{"level":"error","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb"}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53"}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3d9fda620ab76ed97760c207d706ad597b8ee8b7f0d82ae2d475b6bb0bf0dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb"}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3d9fda620ab76ed97760c207d706ad597b8ee8b7f0d82ae2d475b6bb0bf0dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3d9fda620ab76ed97760c207d706ad597b8ee8b7f0d82ae2d475b6bb0bf0dd0"}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53"}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3d9fda620ab76ed97760c207d706ad597b8ee8b7f0d82ae2d475b6bb0bf0dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3d9fda620ab76ed97760c207d706ad597b8ee8b7f0d82ae2d475b6bb0bf0dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb"}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3d9fda620ab76ed97760c207d706ad597b8ee8b7f0d82ae2d475b6bb0bf0dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e57087286c2d0266312fafdc5aad36e3e748b69ab93f0dedd6b96e8651dc0b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3d9fda620ab76ed97760c207d706ad597b8ee8b7f0d82ae2d475b6bb0bf0dd0"}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e57087286c2d0266312fafdc5aad36e3e748b69ab93f0dedd6b96e8651dc0b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c023340ee4ce76aa537283c6479582200186e1081b860cb381a910f8172a9627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53"}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c023340ee4ce76aa537283c6479582200186e1081b860cb381a910f8172a9627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3d9fda620ab76ed97760c207d706ad597b8ee8b7f0d82ae2d475b6bb0bf0dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cabcc77891ec3b31d8bec4e4a82ad6758ab0e89dfcb553455cd7cf86da74719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e57087286c2d0266312fafdc5aad36e3e748b69ab93f0dedd6b96e8651dc0b0"}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cabcc77891ec3b31d8bec4e4a82ad6758ab0e89dfcb553455cd7cf86da74719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e57087286c2d0266312fafdc5aad36e3e748b69ab93f0dedd6b96e8651dc0b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e57087286c2d0266312fafdc5aad36e3e748b69ab93f0dedd6b96e8651dc0b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb"}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e57087286c2d0266312fafdc5aad36e3e748b69ab93f0dedd6b96e8651dc0b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c023340ee4ce76aa537283c6479582200186e1081b860cb381a910f8172a9627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c023340ee4ce76aa537283c6479582200186e1081b860cb381a910f8172a9627"}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c023340ee4ce76aa537283c6479582200186e1081b860cb381a910f8172a9627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cabcc77891ec3b31d8bec4e4a82ad6758ab0e89dfcb553455cd7cf86da74719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e57087286c2d0266312fafdc5aad36e3e748b69ab93f0dedd6b96e8651dc0b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c023340ee4ce76aa537283c6479582200186e1081b860cb381a910f8172a9627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c023340ee4ce76aa537283c6479582200186e1081b860cb381a910f8172a9627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3d9fda620ab76ed97760c207d706ad597b8ee8b7f0d82ae2d475b6bb0bf0dd0"}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c023340ee4ce76aa537283c6479582200186e1081b860cb381a910f8172a9627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cabcc77891ec3b31d8bec4e4a82ad6758ab0e89dfcb553455cd7cf86da74719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cabcc77891ec3b31d8bec4e4a82ad6758ab0e89dfcb553455cd7cf86da74719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c023340ee4ce76aa537283c6479582200186e1081b860cb381a910f8172a9627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cabcc77891ec3b31d8bec4e4a82ad6758ab0e89dfcb553455cd7cf86da74719","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cabcc77891ec3b31d8bec4e4a82ad6758ab0e89dfcb553455cd7cf86da74719"}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cabcc77891ec3b31d8bec4e4a82ad6758ab0e89dfcb553455cd7cf86da74719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:24:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cabcc77891ec3b31d8bec4e4a82ad6758ab0e89dfcb553455cd7cf86da74719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e57087286c2d0266312fafdc5aad36e3e748b69ab93f0dedd6b96e8651dc0b0"}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cabcc77891ec3b31d8bec4e4a82ad6758ab0e89dfcb553455cd7cf86da74719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cabcc77891ec3b31d8bec4e4a82ad6758ab0e89dfcb553455cd7cf86da74719","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c023340ee4ce76aa537283c6479582200186e1081b860cb381a910f8172a9627"}
{"level":"info","ts":"2026-07-07T19:24:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cabcc77891ec3b31d8bec4e4a82ad6758ab0e89dfcb553455cd7cf86da74719"}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"420d3d872e2f813ed7f33dfdbd785facf13ec65f141ed9a8195b358c065509c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/420d3d872e2f813ed7f33dfdbd785facf13ec65f141ed9a8195b358c065509c2"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"420d3d872e2f813ed7f33dfdbd785facf13ec65f141ed9a8195b358c065509c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"420d3d872e2f813ed7f33dfdbd785facf13ec65f141ed9a8195b358c065509c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["420d3d872e2f813ed7f33dfdbd785facf13ec65f141ed9a8195b358c065509c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"420d3d872e2f813ed7f33dfdbd785facf13ec65f141ed9a8195b358c065509c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/420d3d872e2f813ed7f33dfdbd785facf13ec65f141ed9a8195b358c065509c2"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"420d3d872e2f813ed7f33dfdbd785facf13ec65f141ed9a8195b358c065509c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae245560e3fd1991fc5e09a59a4631c6394c68390cd17100134ca66ee24872e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae245560e3fd1991fc5e09a59a4631c6394c68390cd17100134ca66ee24872e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae245560e3fd1991fc5e09a59a4631c6394c68390cd17100134ca66ee24872e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae245560e3fd1991fc5e09a59a4631c6394c68390cd17100134ca66ee24872e"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae245560e3fd1991fc5e09a59a4631c6394c68390cd17100134ca66ee24872e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae245560e3fd1991fc5e09a59a4631c6394c68390cd17100134ca66ee24872e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae245560e3fd1991fc5e09a59a4631c6394c68390cd17100134ca66ee24872e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/420d3d872e2f813ed7f33dfdbd785facf13ec65f141ed9a8195b358c065509c2"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae245560e3fd1991fc5e09a59a4631c6394c68390cd17100134ca66ee24872e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae245560e3fd1991fc5e09a59a4631c6394c68390cd17100134ca66ee24872e"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae245560e3fd1991fc5e09a59a4631c6394c68390cd17100134ca66ee24872e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b34a60b10aba8a641c7f135b1105af5933380140491b907a12258374c100e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b34a60b10aba8a641c7f135b1105af5933380140491b907a12258374c100e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b34a60b10aba8a641c7f135b1105af5933380140491b907a12258374c100e80"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b34a60b10aba8a641c7f135b1105af5933380140491b907a12258374c100e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b34a60b10aba8a641c7f135b1105af5933380140491b907a12258374c100e80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b34a60b10aba8a641c7f135b1105af5933380140491b907a12258374c100e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514291556d62c2b959500ac6cf1fd4e35e3982600cd3a1c1c43161192266cb05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514291556d62c2b959500ac6cf1fd4e35e3982600cd3a1c1c43161192266cb05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b34a60b10aba8a641c7f135b1105af5933380140491b907a12258374c100e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514291556d62c2b959500ac6cf1fd4e35e3982600cd3a1c1c43161192266cb05"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b34a60b10aba8a641c7f135b1105af5933380140491b907a12258374c100e80"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514291556d62c2b959500ac6cf1fd4e35e3982600cd3a1c1c43161192266cb05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514291556d62c2b959500ac6cf1fd4e35e3982600cd3a1c1c43161192266cb05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514291556d62c2b959500ac6cf1fd4e35e3982600cd3a1c1c43161192266cb05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514291556d62c2b959500ac6cf1fd4e35e3982600cd3a1c1c43161192266cb05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514291556d62c2b959500ac6cf1fd4e35e3982600cd3a1c1c43161192266cb05"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514291556d62c2b959500ac6cf1fd4e35e3982600cd3a1c1c43161192266cb05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c051cd381af5e6174699e2ca8c3edac9eb9a531d0df39c58434aed5cc55dd8ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c051cd381af5e6174699e2ca8c3edac9eb9a531d0df39c58434aed5cc55dd8ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514291556d62c2b959500ac6cf1fd4e35e3982600cd3a1c1c43161192266cb05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514291556d62c2b959500ac6cf1fd4e35e3982600cd3a1c1c43161192266cb05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c051cd381af5e6174699e2ca8c3edac9eb9a531d0df39c58434aed5cc55dd8ba"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514291556d62c2b959500ac6cf1fd4e35e3982600cd3a1c1c43161192266cb05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c051cd381af5e6174699e2ca8c3edac9eb9a531d0df39c58434aed5cc55dd8ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c051cd381af5e6174699e2ca8c3edac9eb9a531d0df39c58434aed5cc55dd8ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c051cd381af5e6174699e2ca8c3edac9eb9a531d0df39c58434aed5cc55dd8ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514291556d62c2b959500ac6cf1fd4e35e3982600cd3a1c1c43161192266cb05"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514291556d62c2b959500ac6cf1fd4e35e3982600cd3a1c1c43161192266cb05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5281e8527d6e38f6527b168524ed1242b74ab08379f6621adb3f977173f9393c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5281e8527d6e38f6527b168524ed1242b74ab08379f6621adb3f977173f9393c"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5281e8527d6e38f6527b168524ed1242b74ab08379f6621adb3f977173f9393c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c051cd381af5e6174699e2ca8c3edac9eb9a531d0df39c58434aed5cc55dd8ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c051cd381af5e6174699e2ca8c3edac9eb9a531d0df39c58434aed5cc55dd8ba"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c051cd381af5e6174699e2ca8c3edac9eb9a531d0df39c58434aed5cc55dd8ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5281e8527d6e38f6527b168524ed1242b74ab08379f6621adb3f977173f9393c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5281e8527d6e38f6527b168524ed1242b74ab08379f6621adb3f977173f9393c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5281e8527d6e38f6527b168524ed1242b74ab08379f6621adb3f977173f9393c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c051cd381af5e6174699e2ca8c3edac9eb9a531d0df39c58434aed5cc55dd8ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c051cd381af5e6174699e2ca8c3edac9eb9a531d0df39c58434aed5cc55dd8ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5281e8527d6e38f6527b168524ed1242b74ab08379f6621adb3f977173f9393c"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c051cd381af5e6174699e2ca8c3edac9eb9a531d0df39c58434aed5cc55dd8ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c051cd381af5e6174699e2ca8c3edac9eb9a531d0df39c58434aed5cc55dd8ba"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5281e8527d6e38f6527b168524ed1242b74ab08379f6621adb3f977173f9393c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c051cd381af5e6174699e2ca8c3edac9eb9a531d0df39c58434aed5cc55dd8ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5281e8527d6e38f6527b168524ed1242b74ab08379f6621adb3f977173f9393c"}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c051cd381af5e6174699e2ca8c3edac9eb9a531d0df39c58434aed5cc55dd8ba"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75"}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:25:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"info","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"858421bf-8311-4bb5-8c5a-e4997fb8e593","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51532","PortSpecifier":{"PortValue":51532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"858421bf-8311-4bb5-8c5a-e4997fb8e593","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"858421bf-8311-4bb5-8c5a-e4997fb8e593","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51532","PortSpecifier":{"PortValue":51532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452307,"nanos":825968003},"http":{"id":"858421bf-8311-4bb5-8c5a-e4997fb8e593","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"858421bf-8311-4bb5-8c5a-e4997fb8e593","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"858421bf-8311-4bb5-8c5a-e4997fb8e593","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"858421bf-8311-4bb5-8c5a-e4997fb8e593","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"858421bf-8311-4bb5-8c5a-e4997fb8e593","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"858421bf-8311-4bb5-8c5a-e4997fb8e593","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"858421bf-8311-4bb5-8c5a-e4997fb8e593","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/auth-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"858421bf-8311-4bb5-8c5a-e4997fb8e593","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"858421bf-8311-4bb5-8c5a-e4997fb8e593","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"858421bf-8311-4bb5-8c5a-e4997fb8e593","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"858421bf-8311-4bb5-8c5a-e4997fb8e593","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"858421bf-8311-4bb5-8c5a-e4997fb8e593","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"817d8d43-b1f9-4337-bd7f-b71043601e39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52138","PortSpecifier":{"PortValue":52138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"817d8d43-b1f9-4337-bd7f-b71043601e39","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"817d8d43-b1f9-4337-bd7f-b71043601e39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52138","PortSpecifier":{"PortValue":52138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452307,"nanos":886827219},"http":{"id":"817d8d43-b1f9-4337-bd7f-b71043601e39","method":"POST","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"817d8d43-b1f9-4337-bd7f-b71043601e39","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"817d8d43-b1f9-4337-bd7f-b71043601e39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"817d8d43-b1f9-4337-bd7f-b71043601e39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817d8d43-b1f9-4337-bd7f-b71043601e39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817d8d43-b1f9-4337-bd7f-b71043601e39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817d8d43-b1f9-4337-bd7f-b71043601e39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/auth-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"817d8d43-b1f9-4337-bd7f-b71043601e39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"817d8d43-b1f9-4337-bd7f-b71043601e39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"817d8d43-b1f9-4337-bd7f-b71043601e39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"817d8d43-b1f9-4337-bd7f-b71043601e39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"817d8d43-b1f9-4337-bd7f-b71043601e39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af86d4c4-7338-4d4f-a8c7-ba5ea1ee84e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51544","PortSpecifier":{"PortValue":51544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af86d4c4-7338-4d4f-a8c7-ba5ea1ee84e3","method":"GET","path":"/maas-api/v1/api-keys/56c348c5-f1d0-426e-82d3-61cdf0282c04","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af86d4c4-7338-4d4f-a8c7-ba5ea1ee84e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51544","PortSpecifier":{"PortValue":51544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452307,"nanos":971568078},"http":{"id":"af86d4c4-7338-4d4f-a8c7-ba5ea1ee84e3","method":"GET","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/56c348c5-f1d0-426e-82d3-61cdf0282c04",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af86d4c4-7338-4d4f-a8c7-ba5ea1ee84e3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af86d4c4-7338-4d4f-a8c7-ba5ea1ee84e3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af86d4c4-7338-4d4f-a8c7-ba5ea1ee84e3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/56c348c5-f1d0-426e-82d3-61cdf0282c04",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af86d4c4-7338-4d4f-a8c7-ba5ea1ee84e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af86d4c4-7338-4d4f-a8c7-ba5ea1ee84e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af86d4c4-7338-4d4f-a8c7-ba5ea1ee84e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/auth-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af86d4c4-7338-4d4f-a8c7-ba5ea1ee84e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af86d4c4-7338-4d4f-a8c7-ba5ea1ee84e3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af86d4c4-7338-4d4f-a8c7-ba5ea1ee84e3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af86d4c4-7338-4d4f-a8c7-ba5ea1ee84e3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:25:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af86d4c4-7338-4d4f-a8c7-ba5ea1ee84e3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:25:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e811d56-fdb0-4a86-ad4a-3fa21df8e29d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52144","PortSpecifier":{"PortValue":52144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e811d56-fdb0-4a86-ad4a-3fa21df8e29d","method":"GET","path":"/maas-api/v1/api-keys/784fd2fd-1570-4de4-96a3-fedb0dbdc6c6","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e811d56-fdb0-4a86-ad4a-3fa21df8e29d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52144","PortSpecifier":{"PortValue":52144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452308,"nanos":18198849},"http":{"id":"7e811d56-fdb0-4a86-ad4a-3fa21df8e29d","method":"GET","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/784fd2fd-1570-4de4-96a3-fedb0dbdc6c6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e811d56-fdb0-4a86-ad4a-3fa21df8e29d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:25:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e811d56-fdb0-4a86-ad4a-3fa21df8e29d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:25:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e811d56-fdb0-4a86-ad4a-3fa21df8e29d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/784fd2fd-1570-4de4-96a3-fedb0dbdc6c6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e811d56-fdb0-4a86-ad4a-3fa21df8e29d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e811d56-fdb0-4a86-ad4a-3fa21df8e29d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e811d56-fdb0-4a86-ad4a-3fa21df8e29d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/auth-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e811d56-fdb0-4a86-ad4a-3fa21df8e29d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:25:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e811d56-fdb0-4a86-ad4a-3fa21df8e29d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:25:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e811d56-fdb0-4a86-ad4a-3fa21df8e29d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:25:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e811d56-fdb0-4a86-ad4a-3fa21df8e29d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:25:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e811d56-fdb0-4a86-ad4a-3fa21df8e29d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d726947a-d303-45e4-b425-05ed2663b85b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51390","PortSpecifier":{"PortValue":51390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d726947a-d303-45e4-b425-05ed2663b85b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d726947a-d303-45e4-b425-05ed2663b85b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51390","PortSpecifier":{"PortValue":51390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452323,"nanos":279331203},"http":{"id":"d726947a-d303-45e4-b425-05ed2663b85b","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d726947a-d303-45e4-b425-05ed2663b85b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d726947a-d303-45e4-b425-05ed2663b85b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d726947a-d303-45e4-b425-05ed2663b85b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d726947a-d303-45e4-b425-05ed2663b85b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d726947a-d303-45e4-b425-05ed2663b85b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d726947a-d303-45e4-b425-05ed2663b85b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/auth-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d726947a-d303-45e4-b425-05ed2663b85b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d726947a-d303-45e4-b425-05ed2663b85b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d726947a-d303-45e4-b425-05ed2663b85b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d726947a-d303-45e4-b425-05ed2663b85b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d726947a-d303-45e4-b425-05ed2663b85b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"639621cc-18d8-4279-92ff-eec747c3c360","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58234","PortSpecifier":{"PortValue":58234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"639621cc-18d8-4279-92ff-eec747c3c360","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"639621cc-18d8-4279-92ff-eec747c3c360","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58234","PortSpecifier":{"PortValue":58234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452323,"nanos":320705456},"http":{"id":"639621cc-18d8-4279-92ff-eec747c3c360","method":"POST","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"639621cc-18d8-4279-92ff-eec747c3c360","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"639621cc-18d8-4279-92ff-eec747c3c360","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"639621cc-18d8-4279-92ff-eec747c3c360","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"639621cc-18d8-4279-92ff-eec747c3c360","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"639621cc-18d8-4279-92ff-eec747c3c360","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"639621cc-18d8-4279-92ff-eec747c3c360","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/auth-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"639621cc-18d8-4279-92ff-eec747c3c360","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"639621cc-18d8-4279-92ff-eec747c3c360","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"639621cc-18d8-4279-92ff-eec747c3c360","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"639621cc-18d8-4279-92ff-eec747c3c360","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"639621cc-18d8-4279-92ff-eec747c3c360","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93b46f71-832c-4499-834a-ad7f351f68bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51396","PortSpecifier":{"PortValue":51396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93b46f71-832c-4499-834a-ad7f351f68bd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93b46f71-832c-4499-834a-ad7f351f68bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51396","PortSpecifier":{"PortValue":51396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452323,"nanos":368387937},"http":{"id":"93b46f71-832c-4499-834a-ad7f351f68bd","method":"GET","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93b46f71-832c-4499-834a-ad7f351f68bd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15sGOVFSmQIANnE35_tKcaV14PNRsEz3B989NVUcuz7NwWgpAUhJ8mLZAR0au"}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93b46f71-832c-4499-834a-ad7f351f68bd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15sGOVFSmQIANnE35_tKcaV14PNRsEz3B989NVUcuz7NwWgpAUhJ8mLZAR0au\"}"}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93b46f71-832c-4499-834a-ad7f351f68bd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"78cf1384-a158-41e6-bdff-5d47c222fae5","keyName":"e2e-auth-iso-a-2943ce","subscription":"e2e-auth-iso-fbdc49","tenant":"e2e-shared-a-44233f","userId":"78cf1384-a158-41e6-bdff-5d47c222fae5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93b46f71-832c-4499-834a-ad7f351f68bd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93b46f71-832c-4499-834a-ad7f351f68bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93b46f71-832c-4499-834a-ad7f351f68bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93b46f71-832c-4499-834a-ad7f351f68bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/auth-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93b46f71-832c-4499-834a-ad7f351f68bd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93b46f71-832c-4499-834a-ad7f351f68bd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93b46f71-832c-4499-834a-ad7f351f68bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93b46f71-832c-4499-834a-ad7f351f68bd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-fbdc49"}
{"level":"info","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93b46f71-832c-4499-834a-ad7f351f68bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:25:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93b46f71-832c-4499-834a-ad7f351f68bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b8ef208-e597-49aa-b47b-8120b7b07c98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38740","PortSpecifier":{"PortValue":38740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b8ef208-e597-49aa-b47b-8120b7b07c98","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b8ef208-e597-49aa-b47b-8120b7b07c98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38740","PortSpecifier":{"PortValue":38740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452341,"nanos":393850992},"http":{"id":"8b8ef208-e597-49aa-b47b-8120b7b07c98","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8b8ef208-e597-49aa-b47b-8120b7b07c98","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b8ef208-e597-49aa-b47b-8120b7b07c98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b8ef208-e597-49aa-b47b-8120b7b07c98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b8ef208-e597-49aa-b47b-8120b7b07c98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b8ef208-e597-49aa-b47b-8120b7b07c98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b8ef208-e597-49aa-b47b-8120b7b07c98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/auth-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b8ef208-e597-49aa-b47b-8120b7b07c98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b8ef208-e597-49aa-b47b-8120b7b07c98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b8ef208-e597-49aa-b47b-8120b7b07c98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b8ef208-e597-49aa-b47b-8120b7b07c98","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b8ef208-e597-49aa-b47b-8120b7b07c98","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c067152b-0f25-424a-80b3-9b2c56709d86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36408","PortSpecifier":{"PortValue":36408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c067152b-0f25-424a-80b3-9b2c56709d86","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c067152b-0f25-424a-80b3-9b2c56709d86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36408","PortSpecifier":{"PortValue":36408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452341,"nanos":430643657},"http":{"id":"c067152b-0f25-424a-80b3-9b2c56709d86","method":"POST","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c067152b-0f25-424a-80b3-9b2c56709d86","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c067152b-0f25-424a-80b3-9b2c56709d86","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c067152b-0f25-424a-80b3-9b2c56709d86","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c067152b-0f25-424a-80b3-9b2c56709d86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c067152b-0f25-424a-80b3-9b2c56709d86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c067152b-0f25-424a-80b3-9b2c56709d86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/auth-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c067152b-0f25-424a-80b3-9b2c56709d86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c067152b-0f25-424a-80b3-9b2c56709d86","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c067152b-0f25-424a-80b3-9b2c56709d86","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c067152b-0f25-424a-80b3-9b2c56709d86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c067152b-0f25-424a-80b3-9b2c56709d86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06ef532a-781e-4d30-bf87-4c618b7fcbc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36416","PortSpecifier":{"PortValue":36416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06ef532a-781e-4d30-bf87-4c618b7fcbc0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06ef532a-781e-4d30-bf87-4c618b7fcbc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36416","PortSpecifier":{"PortValue":36416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452341,"nanos":471971552},"http":{"id":"06ef532a-781e-4d30-bf87-4c618b7fcbc0","method":"GET","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06ef532a-781e-4d30-bf87-4c618b7fcbc0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ejH7G0WhubbWR0Zw_RDvnmXetzVtse9Ocs8FJGSIaMR0AldLohm1aQam1VMV"}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"06ef532a-781e-4d30-bf87-4c618b7fcbc0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6f2191.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ejH7G0WhubbWR0Zw_RDvnmXetzVtse9Ocs8FJGSIaMR0AldLohm1aQam1VMV\"}"}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"06ef532a-781e-4d30-bf87-4c618b7fcbc0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6f2191.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06ef532a-781e-4d30-bf87-4c618b7fcbc0","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"06ef532a-781e-4d30-bf87-4c618b7fcbc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06ef532a-781e-4d30-bf87-4c618b7fcbc0","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T19:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06ef532a-781e-4d30-bf87-4c618b7fcbc0","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d2b42d1-90b0-41a7-9ffe-48e288d99934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38654","PortSpecifier":{"PortValue":38654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d2b42d1-90b0-41a7-9ffe-48e288d99934","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d2b42d1-90b0-41a7-9ffe-48e288d99934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38654","PortSpecifier":{"PortValue":38654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452358,"nanos":809720777},"http":{"id":"8d2b42d1-90b0-41a7-9ffe-48e288d99934","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d2b42d1-90b0-41a7-9ffe-48e288d99934","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d2b42d1-90b0-41a7-9ffe-48e288d99934","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d2b42d1-90b0-41a7-9ffe-48e288d99934","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d2b42d1-90b0-41a7-9ffe-48e288d99934","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d2b42d1-90b0-41a7-9ffe-48e288d99934","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d2b42d1-90b0-41a7-9ffe-48e288d99934","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/auth-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d2b42d1-90b0-41a7-9ffe-48e288d99934","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d2b42d1-90b0-41a7-9ffe-48e288d99934","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d2b42d1-90b0-41a7-9ffe-48e288d99934","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d2b42d1-90b0-41a7-9ffe-48e288d99934","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d2b42d1-90b0-41a7-9ffe-48e288d99934","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd5c7e14-e1b9-485e-8091-629bdd11879d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:39116","PortSpecifier":{"PortValue":39116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd5c7e14-e1b9-485e-8091-629bdd11879d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd5c7e14-e1b9-485e-8091-629bdd11879d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:39116","PortSpecifier":{"PortValue":39116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452358,"nanos":845434317},"http":{"id":"fd5c7e14-e1b9-485e-8091-629bdd11879d","method":"POST","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd5c7e14-e1b9-485e-8091-629bdd11879d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd5c7e14-e1b9-485e-8091-629bdd11879d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd5c7e14-e1b9-485e-8091-629bdd11879d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd5c7e14-e1b9-485e-8091-629bdd11879d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd5c7e14-e1b9-485e-8091-629bdd11879d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd5c7e14-e1b9-485e-8091-629bdd11879d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/auth-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd5c7e14-e1b9-485e-8091-629bdd11879d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd5c7e14-e1b9-485e-8091-629bdd11879d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd5c7e14-e1b9-485e-8091-629bdd11879d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd5c7e14-e1b9-485e-8091-629bdd11879d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd5c7e14-e1b9-485e-8091-629bdd11879d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86ce3a47-50ad-487f-9710-dbff0d90067a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38668","PortSpecifier":{"PortValue":38668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86ce3a47-50ad-487f-9710-dbff0d90067a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86ce3a47-50ad-487f-9710-dbff0d90067a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38668","PortSpecifier":{"PortValue":38668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452358,"nanos":881771466},"http":{"id":"86ce3a47-50ad-487f-9710-dbff0d90067a","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86ce3a47-50ad-487f-9710-dbff0d90067a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86ce3a47-50ad-487f-9710-dbff0d90067a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86ce3a47-50ad-487f-9710-dbff0d90067a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86ce3a47-50ad-487f-9710-dbff0d90067a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86ce3a47-50ad-487f-9710-dbff0d90067a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86ce3a47-50ad-487f-9710-dbff0d90067a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/auth-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86ce3a47-50ad-487f-9710-dbff0d90067a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86ce3a47-50ad-487f-9710-dbff0d90067a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86ce3a47-50ad-487f-9710-dbff0d90067a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86ce3a47-50ad-487f-9710-dbff0d90067a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86ce3a47-50ad-487f-9710-dbff0d90067a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beac5b3d-6e57-441b-b9f1-a9133eef29b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:39128","PortSpecifier":{"PortValue":39128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"beac5b3d-6e57-441b-b9f1-a9133eef29b3","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beac5b3d-6e57-441b-b9f1-a9133eef29b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:39128","PortSpecifier":{"PortValue":39128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452358,"nanos":920662833},"http":{"id":"beac5b3d-6e57-441b-b9f1-a9133eef29b3","method":"POST","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"beac5b3d-6e57-441b-b9f1-a9133eef29b3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"beac5b3d-6e57-441b-b9f1-a9133eef29b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"beac5b3d-6e57-441b-b9f1-a9133eef29b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beac5b3d-6e57-441b-b9f1-a9133eef29b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beac5b3d-6e57-441b-b9f1-a9133eef29b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beac5b3d-6e57-441b-b9f1-a9133eef29b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/auth-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"beac5b3d-6e57-441b-b9f1-a9133eef29b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beac5b3d-6e57-441b-b9f1-a9133eef29b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beac5b3d-6e57-441b-b9f1-a9133eef29b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beac5b3d-6e57-441b-b9f1-a9133eef29b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:25:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beac5b3d-6e57-441b-b9f1-a9133eef29b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b7c8f40-d13f-48ac-889a-d3429e147292","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52296","PortSpecifier":{"PortValue":52296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b7c8f40-d13f-48ac-889a-d3429e147292","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b7c8f40-d13f-48ac-889a-d3429e147292","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52296","PortSpecifier":{"PortValue":52296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452374,"nanos":58706559},"http":{"id":"1b7c8f40-d13f-48ac-889a-d3429e147292","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b7c8f40-d13f-48ac-889a-d3429e147292","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b7c8f40-d13f-48ac-889a-d3429e147292","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b7c8f40-d13f-48ac-889a-d3429e147292","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b7c8f40-d13f-48ac-889a-d3429e147292","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b7c8f40-d13f-48ac-889a-d3429e147292","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b7c8f40-d13f-48ac-889a-d3429e147292","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/auth-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b7c8f40-d13f-48ac-889a-d3429e147292","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b7c8f40-d13f-48ac-889a-d3429e147292","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b7c8f40-d13f-48ac-889a-d3429e147292","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b7c8f40-d13f-48ac-889a-d3429e147292","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b7c8f40-d13f-48ac-889a-d3429e147292","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8cd3ca2-6327-4b9f-810d-43fe2035670d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48988","PortSpecifier":{"PortValue":48988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8cd3ca2-6327-4b9f-810d-43fe2035670d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8cd3ca2-6327-4b9f-810d-43fe2035670d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48988","PortSpecifier":{"PortValue":48988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452374,"nanos":97663971},"http":{"id":"f8cd3ca2-6327-4b9f-810d-43fe2035670d","method":"POST","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f8cd3ca2-6327-4b9f-810d-43fe2035670d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8cd3ca2-6327-4b9f-810d-43fe2035670d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8cd3ca2-6327-4b9f-810d-43fe2035670d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8cd3ca2-6327-4b9f-810d-43fe2035670d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8cd3ca2-6327-4b9f-810d-43fe2035670d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8cd3ca2-6327-4b9f-810d-43fe2035670d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/auth-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f8cd3ca2-6327-4b9f-810d-43fe2035670d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8cd3ca2-6327-4b9f-810d-43fe2035670d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8cd3ca2-6327-4b9f-810d-43fe2035670d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8cd3ca2-6327-4b9f-810d-43fe2035670d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8cd3ca2-6327-4b9f-810d-43fe2035670d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21f80ce6-9005-4a72-ae8d-4e4b10870ece","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48994","PortSpecifier":{"PortValue":48994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21f80ce6-9005-4a72-ae8d-4e4b10870ece","method":"GET","path":"/maas-api/v1/api-keys/3a56957e-9311-438e-9586-efac0ea99839","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21f80ce6-9005-4a72-ae8d-4e4b10870ece","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48994","PortSpecifier":{"PortValue":48994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452374,"nanos":139320089},"http":{"id":"21f80ce6-9005-4a72-ae8d-4e4b10870ece","method":"GET","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3a56957e-9311-438e-9586-efac0ea99839",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21f80ce6-9005-4a72-ae8d-4e4b10870ece","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21f80ce6-9005-4a72-ae8d-4e4b10870ece","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21f80ce6-9005-4a72-ae8d-4e4b10870ece","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3a56957e-9311-438e-9586-efac0ea99839",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21f80ce6-9005-4a72-ae8d-4e4b10870ece","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21f80ce6-9005-4a72-ae8d-4e4b10870ece","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21f80ce6-9005-4a72-ae8d-4e4b10870ece","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/auth-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21f80ce6-9005-4a72-ae8d-4e4b10870ece","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21f80ce6-9005-4a72-ae8d-4e4b10870ece","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21f80ce6-9005-4a72-ae8d-4e4b10870ece","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21f80ce6-9005-4a72-ae8d-4e4b10870ece","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21f80ce6-9005-4a72-ae8d-4e4b10870ece","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6faafca7-5074-4da9-bdff-09b224e1386e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52304","PortSpecifier":{"PortValue":52304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6faafca7-5074-4da9-bdff-09b224e1386e","method":"GET","path":"/maas-api/v1/api-keys/3a56957e-9311-438e-9586-efac0ea99839","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6faafca7-5074-4da9-bdff-09b224e1386e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52304","PortSpecifier":{"PortValue":52304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452374,"nanos":173526303},"http":{"id":"6faafca7-5074-4da9-bdff-09b224e1386e","method":"GET","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3a56957e-9311-438e-9586-efac0ea99839",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6faafca7-5074-4da9-bdff-09b224e1386e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6faafca7-5074-4da9-bdff-09b224e1386e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6faafca7-5074-4da9-bdff-09b224e1386e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3a56957e-9311-438e-9586-efac0ea99839",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6faafca7-5074-4da9-bdff-09b224e1386e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6faafca7-5074-4da9-bdff-09b224e1386e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6faafca7-5074-4da9-bdff-09b224e1386e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/auth-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6faafca7-5074-4da9-bdff-09b224e1386e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6faafca7-5074-4da9-bdff-09b224e1386e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6faafca7-5074-4da9-bdff-09b224e1386e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6faafca7-5074-4da9-bdff-09b224e1386e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:26:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6faafca7-5074-4da9-bdff-09b224e1386e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aa02374-e5db-4dae-80cb-1c6520bff971","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55694","PortSpecifier":{"PortValue":55694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6aa02374-e5db-4dae-80cb-1c6520bff971","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aa02374-e5db-4dae-80cb-1c6520bff971","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55694","PortSpecifier":{"PortValue":55694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452391,"nanos":383030212},"http":{"id":"6aa02374-e5db-4dae-80cb-1c6520bff971","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6aa02374-e5db-4dae-80cb-1c6520bff971","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6aa02374-e5db-4dae-80cb-1c6520bff971","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6aa02374-e5db-4dae-80cb-1c6520bff971","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aa02374-e5db-4dae-80cb-1c6520bff971","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aa02374-e5db-4dae-80cb-1c6520bff971","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aa02374-e5db-4dae-80cb-1c6520bff971","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/auth-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6aa02374-e5db-4dae-80cb-1c6520bff971","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aa02374-e5db-4dae-80cb-1c6520bff971","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aa02374-e5db-4dae-80cb-1c6520bff971","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aa02374-e5db-4dae-80cb-1c6520bff971","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aa02374-e5db-4dae-80cb-1c6520bff971","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79a0db41-fd18-4622-8e0a-3a5053a555a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54378","PortSpecifier":{"PortValue":54378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79a0db41-fd18-4622-8e0a-3a5053a555a2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79a0db41-fd18-4622-8e0a-3a5053a555a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54378","PortSpecifier":{"PortValue":54378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452391,"nanos":420690432},"http":{"id":"79a0db41-fd18-4622-8e0a-3a5053a555a2","method":"POST","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"79a0db41-fd18-4622-8e0a-3a5053a555a2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79a0db41-fd18-4622-8e0a-3a5053a555a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79a0db41-fd18-4622-8e0a-3a5053a555a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79a0db41-fd18-4622-8e0a-3a5053a555a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79a0db41-fd18-4622-8e0a-3a5053a555a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79a0db41-fd18-4622-8e0a-3a5053a555a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/auth-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79a0db41-fd18-4622-8e0a-3a5053a555a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79a0db41-fd18-4622-8e0a-3a5053a555a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79a0db41-fd18-4622-8e0a-3a5053a555a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79a0db41-fd18-4622-8e0a-3a5053a555a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79a0db41-fd18-4622-8e0a-3a5053a555a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55702","PortSpecifier":{"PortValue":55702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55702","PortSpecifier":{"PortValue":55702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452391,"nanos":466348751},"http":{"id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1uZUTIM94xXOLDn6_78zoqB8uetZjXeAmTnyZmsrOmbJptmkIjkLOFLox9dT"}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1uZUTIM94xXOLDn6_78zoqB8uetZjXeAmTnyZmsrOmbJptmkIjkLOFLox9dT\"}"}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"684c2557-d538-4bd7-83d1-523aa1b45442","keyName":"e2e-auth-iso-a-0f0235","subscription":"e2e-auth-iso-64660f","tenant":"e2e-shared-a-44233f","userId":"684c2557-d538-4bd7-83d1-523aa1b45442","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/auth-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-64660f"}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:26:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a46974e1-25d6-40e4-81b2-ec6f7f8a6a35","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:26:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/514291556d62c2b959500ac6cf1fd4e35e3982600cd3a1c1c43161192266cb05"}
{"level":"info","ts":"2026-07-07T19:26:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e57087286c2d0266312fafdc5aad36e3e748b69ab93f0dedd6b96e8651dc0b0"}
{"level":"info","ts":"2026-07-07T19:26:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aae245560e3fd1991fc5e09a59a4631c6394c68390cd17100134ca66ee24872e"}
{"level":"info","ts":"2026-07-07T19:26:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c051cd381af5e6174699e2ca8c3edac9eb9a531d0df39c58434aed5cc55dd8ba"}
{"level":"info","ts":"2026-07-07T19:26:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5281e8527d6e38f6527b168524ed1242b74ab08379f6621adb3f977173f9393c"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b34a60b10aba8a641c7f135b1105af5933380140491b907a12258374c100e80"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/515bdaffb3d2f93db111d56aa52cbf5525c5143f58a79e08ce687f7ab3c72a75"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0814b0750a87225c82e0158ef06ca2145e414f7639d010725aa9380499afc30e"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c023340ee4ce76aa537283c6479582200186e1081b860cb381a910f8172a9627"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/420d3d872e2f813ed7f33dfdbd785facf13ec65f141ed9a8195b358c065509c2"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/503a1a69bd745b1bae8c438fabbd49105da5756331aaf393154240929a1934af"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/344ff22b261cc440f315ebb223103577da6d227f6a618639f7a123ee2e0d54bb"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16fd2e240d6b3e8191cf78810399f02600e9316cba99d28f7bd1e26ed023ea4b"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3d9fda620ab76ed97760c207d706ad597b8ee8b7f0d82ae2d475b6bb0bf0dd0"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c16b315aec413f36e2996cc6fab87a6e926e961fe6596ee4a15e2296cae2a3f0"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cabcc77891ec3b31d8bec4e4a82ad6758ab0e89dfcb553455cd7cf86da74719"}
{"level":"debug","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"debug","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"debug","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"info","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"info","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730"}
{"level":"info","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730"}
{"level":"error","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1"}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bc06dde6da4dabc286c9df9bd85e2df2fbe4633225f65137386e52c5a7c69f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bc06dde6da4dabc286c9df9bd85e2df2fbe4633225f65137386e52c5a7c69f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bc06dde6da4dabc286c9df9bd85e2df2fbe4633225f65137386e52c5a7c69f4"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bc06dde6da4dabc286c9df9bd85e2df2fbe4633225f65137386e52c5a7c69f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bc06dde6da4dabc286c9df9bd85e2df2fbe4633225f65137386e52c5a7c69f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bc06dde6da4dabc286c9df9bd85e2df2fbe4633225f65137386e52c5a7c69f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bc06dde6da4dabc286c9df9bd85e2df2fbe4633225f65137386e52c5a7c69f4"}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bc06dde6da4dabc286c9df9bd85e2df2fbe4633225f65137386e52c5a7c69f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bc06dde6da4dabc286c9df9bd85e2df2fbe4633225f65137386e52c5a7c69f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bc06dde6da4dabc286c9df9bd85e2df2fbe4633225f65137386e52c5a7c69f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bc06dde6da4dabc286c9df9bd85e2df2fbe4633225f65137386e52c5a7c69f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1"}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bc06dde6da4dabc286c9df9bd85e2df2fbe4633225f65137386e52c5a7c69f4"}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25"}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6738935d9b72d31eb30a345ac9297c8e368b0ab81c8a0ac2a9ee7ce14d084013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6738935d9b72d31eb30a345ac9297c8e368b0ab81c8a0ac2a9ee7ce14d084013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6738935d9b72d31eb30a345ac9297c8e368b0ab81c8a0ac2a9ee7ce14d084013"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6738935d9b72d31eb30a345ac9297c8e368b0ab81c8a0ac2a9ee7ce14d084013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6738935d9b72d31eb30a345ac9297c8e368b0ab81c8a0ac2a9ee7ce14d084013"}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6738935d9b72d31eb30a345ac9297c8e368b0ab81c8a0ac2a9ee7ce14d084013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6738935d9b72d31eb30a345ac9297c8e368b0ab81c8a0ac2a9ee7ce14d084013"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6738935d9b72d31eb30a345ac9297c8e368b0ab81c8a0ac2a9ee7ce14d084013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6738935d9b72d31eb30a345ac9297c8e368b0ab81c8a0ac2a9ee7ce14d084013","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6738935d9b72d31eb30a345ac9297c8e368b0ab81c8a0ac2a9ee7ce14d084013"}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a"}
{"level":"error","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a"}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5"}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5"}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a"}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5"}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5"}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5"}
{"level":"debug","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5"}
{"level":"debug","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5"}
{"level":"debug","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5"}
{"level":"debug","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5"}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"}
{"level":"error","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"}
{"level":"error","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92"}
{"level":"error","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"error","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c"}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c"}
{"level":"error","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f039a58c548ceb579d4201cf4afb91db6a89c3a051c4e376fb1022409779006","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f039a58c548ceb579d4201cf4afb91db6a89c3a051c4e376fb1022409779006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f039a58c548ceb579d4201cf4afb91db6a89c3a051c4e376fb1022409779006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f039a58c548ceb579d4201cf4afb91db6a89c3a051c4e376fb1022409779006","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f039a58c548ceb579d4201cf4afb91db6a89c3a051c4e376fb1022409779006"}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f039a58c548ceb579d4201cf4afb91db6a89c3a051c4e376fb1022409779006","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f039a58c548ceb579d4201cf4afb91db6a89c3a051c4e376fb1022409779006"}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f039a58c548ceb579d4201cf4afb91db6a89c3a051c4e376fb1022409779006","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f039a58c548ceb579d4201cf4afb91db6a89c3a051c4e376fb1022409779006"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f039a58c548ceb579d4201cf4afb91db6a89c3a051c4e376fb1022409779006","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f039a58c548ceb579d4201cf4afb91db6a89c3a051c4e376fb1022409779006","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f039a58c548ceb579d4201cf4afb91db6a89c3a051c4e376fb1022409779006"}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c"}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bc06dde6da4dabc286c9df9bd85e2df2fbe4633225f65137386e52c5a7c69f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bc06dde6da4dabc286c9df9bd85e2df2fbe4633225f65137386e52c5a7c69f4"}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3"}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92"}
{"level":"debug","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730"}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92"}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6738935d9b72d31eb30a345ac9297c8e368b0ab81c8a0ac2a9ee7ce14d084013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92"}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1"}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f039a58c548ceb579d4201cf4afb91db6a89c3a051c4e376fb1022409779006","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6738935d9b72d31eb30a345ac9297c8e368b0ab81c8a0ac2a9ee7ce14d084013"}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a"}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f039a58c548ceb579d4201cf4afb91db6a89c3a051c4e376fb1022409779006"}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25"}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92"}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"}
{"level":"info","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05b2423e-721f-492d-95b8-f320950a213f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53486","PortSpecifier":{"PortValue":53486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05b2423e-721f-492d-95b8-f320950a213f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05b2423e-721f-492d-95b8-f320950a213f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53486","PortSpecifier":{"PortValue":53486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452452,"nanos":260514100},"http":{"id":"05b2423e-721f-492d-95b8-f320950a213f","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05b2423e-721f-492d-95b8-f320950a213f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05b2423e-721f-492d-95b8-f320950a213f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05b2423e-721f-492d-95b8-f320950a213f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05b2423e-721f-492d-95b8-f320950a213f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05b2423e-721f-492d-95b8-f320950a213f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05b2423e-721f-492d-95b8-f320950a213f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/sub-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05b2423e-721f-492d-95b8-f320950a213f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05b2423e-721f-492d-95b8-f320950a213f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05b2423e-721f-492d-95b8-f320950a213f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05b2423e-721f-492d-95b8-f320950a213f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05b2423e-721f-492d-95b8-f320950a213f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6204c45-5a00-4bb2-8ff7-0a94423a7817","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33580","PortSpecifier":{"PortValue":33580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6204c45-5a00-4bb2-8ff7-0a94423a7817","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6204c45-5a00-4bb2-8ff7-0a94423a7817","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33580","PortSpecifier":{"PortValue":33580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452452,"nanos":304753104},"http":{"id":"b6204c45-5a00-4bb2-8ff7-0a94423a7817","method":"POST","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b6204c45-5a00-4bb2-8ff7-0a94423a7817","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6204c45-5a00-4bb2-8ff7-0a94423a7817","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6204c45-5a00-4bb2-8ff7-0a94423a7817","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6204c45-5a00-4bb2-8ff7-0a94423a7817","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6204c45-5a00-4bb2-8ff7-0a94423a7817","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6204c45-5a00-4bb2-8ff7-0a94423a7817","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/sub-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b6204c45-5a00-4bb2-8ff7-0a94423a7817","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6204c45-5a00-4bb2-8ff7-0a94423a7817","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6204c45-5a00-4bb2-8ff7-0a94423a7817","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6204c45-5a00-4bb2-8ff7-0a94423a7817","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6204c45-5a00-4bb2-8ff7-0a94423a7817","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53488","PortSpecifier":{"PortValue":53488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53488","PortSpecifier":{"PortValue":53488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452452,"nanos":349198413},"http":{"id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","method":"GET","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OCW1heAUqekpKBMT_Du1oCXZivmnUNIwSHnufR3cKUeAL4oJKCQ2hw2P2vJW"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OCW1heAUqekpKBMT_Du1oCXZivmnUNIwSHnufR3cKUeAL4oJKCQ2hw2P2vJW\"}"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f861a2a0-d0d8-49f4-9ca9-0daf3e9efd6e","keyName":"e2e-sub-iso-bb615f","subscription":"e2e-a-only-126db8","tenant":"e2e-shared-a-44233f","userId":"f861a2a0-d0d8-49f4-9ca9-0daf3e9efd6e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/sub-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-126db8"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a60a7de-8685-49e7-a213-16c1e7eaba08","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33588","PortSpecifier":{"PortValue":33588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33588","PortSpecifier":{"PortValue":33588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452452,"nanos":390276629},"http":{"id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","method":"GET","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FqLK6A2uR1hzXjTM_BGf8yJO61sYaGoe6S1eRi5h1T3MYThsD0o4HaHbFJUV"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6f2191.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FqLK6A2uR1hzXjTM_BGf8yJO61sYaGoe6S1eRi5h1T3MYThsD0o4HaHbFJUV\"}"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6f2191.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7825a418-95a9-4b8c-83ed-6ba31152d298","keyName":"e2e-sub-iso-f28735","subscription":"e2e-b-only-126db8","tenant":"e2e-shared-b-6f2191","userId":"7825a418-95a9-4b8c-83ed-6ba31152d298","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/sub-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-126db8"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd6dd8d1-a377-4544-aa63-2b4321179e08","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b870a733-bb01-4d9d-8d13-cb05f0682a88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45992","PortSpecifier":{"PortValue":45992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b870a733-bb01-4d9d-8d13-cb05f0682a88","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b870a733-bb01-4d9d-8d13-cb05f0682a88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45992","PortSpecifier":{"PortValue":45992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452462,"nanos":568603469},"http":{"id":"b870a733-bb01-4d9d-8d13-cb05f0682a88","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b870a733-bb01-4d9d-8d13-cb05f0682a88","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b870a733-bb01-4d9d-8d13-cb05f0682a88","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b870a733-bb01-4d9d-8d13-cb05f0682a88","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b870a733-bb01-4d9d-8d13-cb05f0682a88","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b870a733-bb01-4d9d-8d13-cb05f0682a88","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b870a733-bb01-4d9d-8d13-cb05f0682a88","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/sub-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b870a733-bb01-4d9d-8d13-cb05f0682a88","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b870a733-bb01-4d9d-8d13-cb05f0682a88","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b870a733-bb01-4d9d-8d13-cb05f0682a88","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b870a733-bb01-4d9d-8d13-cb05f0682a88","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b870a733-bb01-4d9d-8d13-cb05f0682a88","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a648a14d-eb7c-47aa-a090-8898ccb9a5ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46678","PortSpecifier":{"PortValue":46678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a648a14d-eb7c-47aa-a090-8898ccb9a5ba","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a648a14d-eb7c-47aa-a090-8898ccb9a5ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46678","PortSpecifier":{"PortValue":46678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452462,"nanos":607627436},"http":{"id":"a648a14d-eb7c-47aa-a090-8898ccb9a5ba","method":"POST","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a648a14d-eb7c-47aa-a090-8898ccb9a5ba","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a648a14d-eb7c-47aa-a090-8898ccb9a5ba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a648a14d-eb7c-47aa-a090-8898ccb9a5ba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a648a14d-eb7c-47aa-a090-8898ccb9a5ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a648a14d-eb7c-47aa-a090-8898ccb9a5ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a648a14d-eb7c-47aa-a090-8898ccb9a5ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/sub-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a648a14d-eb7c-47aa-a090-8898ccb9a5ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a648a14d-eb7c-47aa-a090-8898ccb9a5ba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a648a14d-eb7c-47aa-a090-8898ccb9a5ba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a648a14d-eb7c-47aa-a090-8898ccb9a5ba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a648a14d-eb7c-47aa-a090-8898ccb9a5ba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abf0311c-e336-47d4-ab03-4c7f692965b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45996","PortSpecifier":{"PortValue":45996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abf0311c-e336-47d4-ab03-4c7f692965b2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abf0311c-e336-47d4-ab03-4c7f692965b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45996","PortSpecifier":{"PortValue":45996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452462,"nanos":645557156},"http":{"id":"abf0311c-e336-47d4-ab03-4c7f692965b2","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abf0311c-e336-47d4-ab03-4c7f692965b2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EGlgq1NfgcXoWIL6_fT9mYoMmBUpc7eh4liI9DaegxxB3cP5tpnUBWcBq1nM"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"abf0311c-e336-47d4-ab03-4c7f692965b2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EGlgq1NfgcXoWIL6_fT9mYoMmBUpc7eh4liI9DaegxxB3cP5tpnUBWcBq1nM\"}"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"abf0311c-e336-47d4-ab03-4c7f692965b2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9b78dd64-6e63-423d-b3a7-b1d2b2bbe6c5","keyName":"e2e-sub-iso-7b3624","subscription":"e2e-shared-sub-be3b80","tenant":"e2e-shared-a-44233f","userId":"9b78dd64-6e63-423d-b3a7-b1d2b2bbe6c5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abf0311c-e336-47d4-ab03-4c7f692965b2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abf0311c-e336-47d4-ab03-4c7f692965b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abf0311c-e336-47d4-ab03-4c7f692965b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abf0311c-e336-47d4-ab03-4c7f692965b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/sub-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abf0311c-e336-47d4-ab03-4c7f692965b2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abf0311c-e336-47d4-ab03-4c7f692965b2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abf0311c-e336-47d4-ab03-4c7f692965b2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-be3b80"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"abf0311c-e336-47d4-ab03-4c7f692965b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abf0311c-e336-47d4-ab03-4c7f692965b2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abf0311c-e336-47d4-ab03-4c7f692965b2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46682","PortSpecifier":{"PortValue":46682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46682","PortSpecifier":{"PortValue":46682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452462,"nanos":679915209},"http":{"id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","method":"POST","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wLrHnOdSgHLuWy5V_YgTapZbd0Y5S3sSJ66ZFoFrp3bSD9loDTf7MIM1jM4X"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6f2191.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wLrHnOdSgHLuWy5V_YgTapZbd0Y5S3sSJ66ZFoFrp3bSD9loDTf7MIM1jM4X\"}"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6f2191.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3fab37cb-1d19-4140-9edc-cc63dcbac397","keyName":"e2e-sub-iso-d8e931","subscription":"e2e-shared-sub-be3b80","tenant":"e2e-shared-b-6f2191","userId":"3fab37cb-1d19-4140-9edc-cc63dcbac397","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/sub-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-be3b80"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:27:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2402aab2-a69c-4f82-9fff-f1691d89af3d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a250625ae5fd6287ff9309e962b7588896f9e4a7a0c2d61efa669fba942dd6c"}
{"level":"info","ts":"2026-07-07T19:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50584a5a6faff135a5807f52f08edc1b805a76dcb4569321ed04840296da796a"}
{"level":"info","ts":"2026-07-07T19:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75804e517b5155598dd610af6b6516b6bb8ccbb8b360e31098353dde22744bee"}
{"level":"info","ts":"2026-07-07T19:27:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5108e62284d1ddd407de3772884fe1eeee893208f73f7f1742268e97cae4d6f3"}
{"level":"info","ts":"2026-07-07T19:27:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f82af9e5ec47d3a1bca2b876f77cfc91f7308f69d6afdd7896fb0a0f2f0d1dec"}
{"level":"info","ts":"2026-07-07T19:27:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0edfaf1ae2bf284a1d7cfb79f10166ab49a1c568897b4c8bc81cc49493bcfad5"}
{"level":"info","ts":"2026-07-07T19:27:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66a9913eddbefc6d443243e252a2e41be3878c6d7579711b4b11277993e6ad92"}
{"level":"info","ts":"2026-07-07T19:27:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50767632ec16cbca5152f29f945e8449be9bca3b57f13ce2452e4a547dfcd545"}
{"level":"info","ts":"2026-07-07T19:27:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14687095eeb84b349e15ef353387b6b8111b98d25b7c2762e2cf235d2b2dec25"}
{"level":"info","ts":"2026-07-07T19:27:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f039a58c548ceb579d4201cf4afb91db6a89c3a051c4e376fb1022409779006"}
{"level":"info","ts":"2026-07-07T19:27:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bc06dde6da4dabc286c9df9bd85e2df2fbe4633225f65137386e52c5a7c69f4"}
{"level":"info","ts":"2026-07-07T19:27:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08babfb82e86c3289da9b774768401e08c9b8387a8e173778bde6c866755a730"}
{"level":"info","ts":"2026-07-07T19:27:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6738935d9b72d31eb30a345ac9297c8e368b0ab81c8a0ac2a9ee7ce14d084013"}
{"level":"info","ts":"2026-07-07T19:27:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baa4d80fcb96b22a41dcb1c902a942d21aa3a36cce3f834b2797b254a57215f1"}
{"level":"info","ts":"2026-07-07T19:27:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d451cc7f84d57a5ba19d2178dfcb92e8ce994af3cc97eea64ef5dcba9acb5c6"}
{"level":"info","ts":"2026-07-07T19:27:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b85bda40e9f68b0705db2035d2c0ffcd220ceef77bd8df1694bd6d0591769dd7"}
{"level":"debug","ts":"2026-07-07T19:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5"}
{"level":"info","ts":"2026-07-07T19:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d"}
{"level":"error","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"}
{"level":"error","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"error","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"error","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e"}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4"}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4"}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d"}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e"}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"info","ts":"2026-07-07T19:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d"}
{"level":"info","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52502","PortSpecifier":{"PortValue":52502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52502","PortSpecifier":{"PortValue":52502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452515,"nanos":464439526},"http":{"id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36410","PortSpecifier":{"PortValue":36410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36410","PortSpecifier":{"PortValue":36410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452515,"nanos":505437941},"http":{"id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","method":"POST","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/rate-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52504","PortSpecifier":{"PortValue":52504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","method":"POST","path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52504","PortSpecifier":{"PortValue":52504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452515,"nanos":551153926},"http":{"id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O1aliO53aFKkxIQf_ogK7aBjsuIyQc6kxrUTEff9n1tsqFwGXhIPQGRuab69"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O1aliO53aFKkxIQf_ogK7aBjsuIyQc6kxrUTEff9n1tsqFwGXhIPQGRuab69\"}"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","keyName":"e2e-rate-a-81a38a","subscription":"e2e-rate-iso-a-81a38a","tenant":"e2e-shared-a-44233f","userId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\",\"requestedSubscription\":\"e2e-rate-iso-a-81a38a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81a38a","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-81a38a"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","keyName":"e2e-rate-a-81a38a","selected_subscription":"e2e-rate-iso-a-81a38a","selected_subscription_key":"ai-tenant-e2e-shared-a-44233f/e2e-rate-iso-a-81a38a@ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81a38a","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52508","PortSpecifier":{"PortValue":52508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","method":"POST","path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52508","PortSpecifier":{"PortValue":52508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452516,"nanos":604860647},"http":{"id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O1aliO53aFKkxIQf_ogK7aBjsuIyQc6kxrUTEff9n1tsqFwGXhIPQGRuab69"}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O1aliO53aFKkxIQf_ogK7aBjsuIyQc6kxrUTEff9n1tsqFwGXhIPQGRuab69\"}"}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","keyName":"e2e-rate-a-81a38a","subscription":"e2e-rate-iso-a-81a38a","tenant":"e2e-shared-a-44233f","userId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\",\"requestedSubscription\":\"e2e-rate-iso-a-81a38a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81a38a","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-81a38a"}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","keyName":"e2e-rate-a-81a38a","selected_subscription":"e2e-rate-iso-a-81a38a","selected_subscription_key":"ai-tenant-e2e-shared-a-44233f/e2e-rate-iso-a-81a38a@ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81a38a","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52510","PortSpecifier":{"PortValue":52510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"362e33c9-0e41-4c91-b036-fe270379b8a4","method":"POST","path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52510","PortSpecifier":{"PortValue":52510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452517,"nanos":645647702},"http":{"id":"362e33c9-0e41-4c91-b036-fe270379b8a4","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O1aliO53aFKkxIQf_ogK7aBjsuIyQc6kxrUTEff9n1tsqFwGXhIPQGRuab69"}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O1aliO53aFKkxIQf_ogK7aBjsuIyQc6kxrUTEff9n1tsqFwGXhIPQGRuab69\"}"}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","keyName":"e2e-rate-a-81a38a","subscription":"e2e-rate-iso-a-81a38a","tenant":"e2e-shared-a-44233f","userId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\",\"requestedSubscription\":\"e2e-rate-iso-a-81a38a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81a38a","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-81a38a"}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","keyName":"e2e-rate-a-81a38a","selected_subscription":"e2e-rate-iso-a-81a38a","selected_subscription_key":"ai-tenant-e2e-shared-a-44233f/e2e-rate-iso-a-81a38a@ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81a38a","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36322","PortSpecifier":{"PortValue":36322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e884926-6d33-4179-b13a-0869c6718f7d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36322","PortSpecifier":{"PortValue":36322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452530,"nanos":686921257},"http":{"id":"1e884926-6d33-4179-b13a-0869c6718f7d","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5445b72a-064d-4637-a866-a75c43c4b675","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41194","PortSpecifier":{"PortValue":41194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5445b72a-064d-4637-a866-a75c43c4b675","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5445b72a-064d-4637-a866-a75c43c4b675","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41194","PortSpecifier":{"PortValue":41194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452530,"nanos":720963818},"http":{"id":"5445b72a-064d-4637-a866-a75c43c4b675","method":"POST","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5445b72a-064d-4637-a866-a75c43c4b675","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5445b72a-064d-4637-a866-a75c43c4b675","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5445b72a-064d-4637-a866-a75c43c4b675","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5445b72a-064d-4637-a866-a75c43c4b675","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5445b72a-064d-4637-a866-a75c43c4b675","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5445b72a-064d-4637-a866-a75c43c4b675","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/rate-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5445b72a-064d-4637-a866-a75c43c4b675","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5445b72a-064d-4637-a866-a75c43c4b675","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5445b72a-064d-4637-a866-a75c43c4b675","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5445b72a-064d-4637-a866-a75c43c4b675","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5445b72a-064d-4637-a866-a75c43c4b675","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36338","PortSpecifier":{"PortValue":36338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3179adaa-a280-46cb-9d6b-6308416155b1","method":"POST","path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36338","PortSpecifier":{"PortValue":36338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452530,"nanos":754782206},"http":{"id":"3179adaa-a280-46cb-9d6b-6308416155b1","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RawUqjt3arSv4vse_UB4jGdbACkShzEMpnZfLtiIoRwsdwg96biTtj2lxGn"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RawUqjt3arSv4vse_UB4jGdbACkShzEMpnZfLtiIoRwsdwg96biTtj2lxGn\"}"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","keyName":"e2e-rate-a-858b11","subscription":"e2e-rate-iso-a-858b11","tenant":"e2e-shared-a-44233f","userId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\",\"requestedSubscription\":\"e2e-rate-iso-a-858b11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-858b11","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-858b11"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","keyName":"e2e-rate-a-858b11","selected_subscription":"e2e-rate-iso-a-858b11","selected_subscription_key":"ai-tenant-e2e-shared-a-44233f/e2e-rate-iso-a-858b11@ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-858b11","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36354","PortSpecifier":{"PortValue":36354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"057640dd-25a4-4514-a6ee-0c13c97d997e","method":"POST","path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36354","PortSpecifier":{"PortValue":36354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452531,"nanos":794731832},"http":{"id":"057640dd-25a4-4514-a6ee-0c13c97d997e","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RawUqjt3arSv4vse_UB4jGdbACkShzEMpnZfLtiIoRwsdwg96biTtj2lxGn"}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RawUqjt3arSv4vse_UB4jGdbACkShzEMpnZfLtiIoRwsdwg96biTtj2lxGn\"}"}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","keyName":"e2e-rate-a-858b11","subscription":"e2e-rate-iso-a-858b11","tenant":"e2e-shared-a-44233f","userId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\",\"requestedSubscription\":\"e2e-rate-iso-a-858b11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-858b11","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-858b11"}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","keyName":"e2e-rate-a-858b11","selected_subscription":"e2e-rate-iso-a-858b11","selected_subscription_key":"ai-tenant-e2e-shared-a-44233f/e2e-rate-iso-a-858b11@ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-858b11","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36368","PortSpecifier":{"PortValue":36368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"996ea8c5-4059-4f74-971a-cce4110fff0b","method":"POST","path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36368","PortSpecifier":{"PortValue":36368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452532,"nanos":830753915},"http":{"id":"996ea8c5-4059-4f74-971a-cce4110fff0b","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RawUqjt3arSv4vse_UB4jGdbACkShzEMpnZfLtiIoRwsdwg96biTtj2lxGn"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RawUqjt3arSv4vse_UB4jGdbACkShzEMpnZfLtiIoRwsdwg96biTtj2lxGn\"}"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","keyName":"e2e-rate-a-858b11","subscription":"e2e-rate-iso-a-858b11","tenant":"e2e-shared-a-44233f","userId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\",\"requestedSubscription\":\"e2e-rate-iso-a-858b11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-858b11","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-858b11"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","keyName":"e2e-rate-a-858b11","selected_subscription":"e2e-rate-iso-a-858b11","selected_subscription_key":"ai-tenant-e2e-shared-a-44233f/e2e-rate-iso-a-858b11@ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-858b11","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41202","PortSpecifier":{"PortValue":41202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","method":"POST","path":"/ai-tenant-e2e-shared-b-6f2191/rate-test-model-6f2191/v1/completions","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41202","PortSpecifier":{"PortValue":41202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452532,"nanos":869204887},"http":{"id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","method":"POST","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-6f2191/rate-test-model-6f2191/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gcOUxgfgmkB3JdbX_nzgra0EjUCpofe0OwlrTCC4udGBlRpOZaAGb7aFfwzW"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6f2191.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gcOUxgfgmkB3JdbX_nzgra0EjUCpofe0OwlrTCC4udGBlRpOZaAGb7aFfwzW\"}"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6f2191.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9102085a-88db-4f01-9455-79920e016f39","keyName":"e2e-rate-b-858b11","subscription":"e2e-rate-iso-b-858b11","tenant":"e2e-shared-b-6f2191","userId":"9102085a-88db-4f01-9455-79920e016f39","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-6f2191.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-6f2191/rate-test-model-6f2191\",\"requestedSubscription\":\"e2e-rate-iso-b-858b11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6f2191.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6f2191","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-858b11","namespace":"ai-tenant-e2e-shared-b-6f2191","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/rate-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-858b11"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9102085a-88db-4f01-9455-79920e016f39","keyName":"e2e-rate-b-858b11","selected_subscription":"e2e-rate-iso-b-858b11","selected_subscription_key":"ai-tenant-e2e-shared-b-6f2191/e2e-rate-iso-b-858b11@ai-tenant-e2e-shared-b-6f2191/rate-test-model-6f2191","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6f2191","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-858b11","namespace":"ai-tenant-e2e-shared-b-6f2191","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e"}
{"level":"info","ts":"2026-07-07T19:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d"}
{"level":"info","ts":"2026-07-07T19:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"info","ts":"2026-07-07T19:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4"}
{"level":"info","ts":"2026-07-07T19:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d"}
{"level":"info","ts":"2026-07-07T19:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"}
{"level":"info","ts":"2026-07-07T19:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e"}
{"level":"info","ts":"2026-07-07T19:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5"}
{"level":"info","ts":"2026-07-07T19:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"info","ts":"2026-07-07T19:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}