--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-06T21:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:54:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:54:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f91ede62dd30cdbeadacf21c2708ffa39eb81bb1f2983500b7a8e33df348ec9"}
{"level":"info","ts":"2026-07-06T21:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:54:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:54:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"info","ts":"2026-07-06T21:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ccc92ac499356cd43c0cf5ca232de7c2280afd9584d91679c798bcbf2f8c0a0"}
{"level":"info","ts":"2026-07-06T21:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c2c8bf848485d8566e8880b59e36e750fbbaac4bc4b5b0e40354f81c22f87da"}
{"level":"info","ts":"2026-07-06T21:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/610377ac8911d846e3cb781f4dac2dbd7b608bbfeab987d4f682fca38f529b9b"}
{"level":"info","ts":"2026-07-06T21:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f91ede62dd30cdbeadacf21c2708ffa39eb81bb1f2983500b7a8e33df348ec9"}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8"}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8"}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8"}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e"}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e"}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e"}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8"}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e"}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5fd51491c2f65a562021bd9defd2dc0f03915deba75fe8ba346623108e88ce6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5fd51491c2f65a562021bd9defd2dc0f03915deba75fe8ba346623108e88ce6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fd51491c2f65a562021bd9defd2dc0f03915deba75fe8ba346623108e88ce6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fd51491c2f65a562021bd9defd2dc0f03915deba75fe8ba346623108e88ce6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5fd51491c2f65a562021bd9defd2dc0f03915deba75fe8ba346623108e88ce6"}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fd51491c2f65a562021bd9defd2dc0f03915deba75fe8ba346623108e88ce6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5fd51491c2f65a562021bd9defd2dc0f03915deba75fe8ba346623108e88ce6"}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5fd51491c2f65a562021bd9defd2dc0f03915deba75fe8ba346623108e88ce6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5fd51491c2f65a562021bd9defd2dc0f03915deba75fe8ba346623108e88ce6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5fd51491c2f65a562021bd9defd2dc0f03915deba75fe8ba346623108e88ce6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801beb7a3c373d07346269475c2df7b9b63f0161c11ac25f82832ddbe245931d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801beb7a3c373d07346269475c2df7b9b63f0161c11ac25f82832ddbe245931d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fd51491c2f65a562021bd9defd2dc0f03915deba75fe8ba346623108e88ce6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"801beb7a3c373d07346269475c2df7b9b63f0161c11ac25f82832ddbe245931d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801beb7a3c373d07346269475c2df7b9b63f0161c11ac25f82832ddbe245931d"}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801beb7a3c373d07346269475c2df7b9b63f0161c11ac25f82832ddbe245931d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["801beb7a3c373d07346269475c2df7b9b63f0161c11ac25f82832ddbe245931d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801beb7a3c373d07346269475c2df7b9b63f0161c11ac25f82832ddbe245931d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"801beb7a3c373d07346269475c2df7b9b63f0161c11ac25f82832ddbe245931d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5fd51491c2f65a562021bd9defd2dc0f03915deba75fe8ba346623108e88ce6"}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801beb7a3c373d07346269475c2df7b9b63f0161c11ac25f82832ddbe245931d"}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182da693b3961debad24a95f2687a95a2b33a4bd00131a4c636b0cff99572ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182da693b3961debad24a95f2687a95a2b33a4bd00131a4c636b0cff99572ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182da693b3961debad24a95f2687a95a2b33a4bd00131a4c636b0cff99572ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182da693b3961debad24a95f2687a95a2b33a4bd00131a4c636b0cff99572ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182da693b3961debad24a95f2687a95a2b33a4bd00131a4c636b0cff99572ab"}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182da693b3961debad24a95f2687a95a2b33a4bd00131a4c636b0cff99572ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182da693b3961debad24a95f2687a95a2b33a4bd00131a4c636b0cff99572ab"}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182da693b3961debad24a95f2687a95a2b33a4bd00131a4c636b0cff99572ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0182da693b3961debad24a95f2687a95a2b33a4bd00131a4c636b0cff99572ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182da693b3961debad24a95f2687a95a2b33a4bd00131a4c636b0cff99572ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182da693b3961debad24a95f2687a95a2b33a4bd00131a4c636b0cff99572ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182da693b3961debad24a95f2687a95a2b33a4bd00131a4c636b0cff99572ab"}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab669459e73fe56cdc90209a66d5fc731cfeabca1535071713cb1cbdabcd7a6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab669459e73fe56cdc90209a66d5fc731cfeabca1535071713cb1cbdabcd7a6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab669459e73fe56cdc90209a66d5fc731cfeabca1535071713cb1cbdabcd7a6a"}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab669459e73fe56cdc90209a66d5fc731cfeabca1535071713cb1cbdabcd7a6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab669459e73fe56cdc90209a66d5fc731cfeabca1535071713cb1cbdabcd7a6a"}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab669459e73fe56cdc90209a66d5fc731cfeabca1535071713cb1cbdabcd7a6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab669459e73fe56cdc90209a66d5fc731cfeabca1535071713cb1cbdabcd7a6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab669459e73fe56cdc90209a66d5fc731cfeabca1535071713cb1cbdabcd7a6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab669459e73fe56cdc90209a66d5fc731cfeabca1535071713cb1cbdabcd7a6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab669459e73fe56cdc90209a66d5fc731cfeabca1535071713cb1cbdabcd7a6a"}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab669459e73fe56cdc90209a66d5fc731cfeabca1535071713cb1cbdabcd7a6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab669459e73fe56cdc90209a66d5fc731cfeabca1535071713cb1cbdabcd7a6a"}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e77178afedb6fbfd7d0f8a5792fc9a945e5c648aa1b1d64f280f436a7fb45a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e77178afedb6fbfd7d0f8a5792fc9a945e5c648aa1b1d64f280f436a7fb45a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e77178afedb6fbfd7d0f8a5792fc9a945e5c648aa1b1d64f280f436a7fb45a2"}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e77178afedb6fbfd7d0f8a5792fc9a945e5c648aa1b1d64f280f436a7fb45a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e77178afedb6fbfd7d0f8a5792fc9a945e5c648aa1b1d64f280f436a7fb45a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b"}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e77178afedb6fbfd7d0f8a5792fc9a945e5c648aa1b1d64f280f436a7fb45a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e77178afedb6fbfd7d0f8a5792fc9a945e5c648aa1b1d64f280f436a7fb45a2"}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e77178afedb6fbfd7d0f8a5792fc9a945e5c648aa1b1d64f280f436a7fb45a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39"}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b"}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e77178afedb6fbfd7d0f8a5792fc9a945e5c648aa1b1d64f280f436a7fb45a2"}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39"}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b"}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39"}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b"}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39"}
{"level":"info","ts":"2026-07-06T21:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b"}
{"level":"debug","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d"}
{"level":"info","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d"}
{"level":"debug","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d"}
{"level":"debug","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d"}
{"level":"debug","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d"}
{"level":"debug","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d"}
{"level":"debug","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd"}
{"level":"debug","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd"}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd"}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd"}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fbee56e9fd9ad645d597265c45d08b94c328728df035dcf80e8754588a3b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fbee56e9fd9ad645d597265c45d08b94c328728df035dcf80e8754588a3b89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fbee56e9fd9ad645d597265c45d08b94c328728df035dcf80e8754588a3b89"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fbee56e9fd9ad645d597265c45d08b94c328728df035dcf80e8754588a3b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8fbee56e9fd9ad645d597265c45d08b94c328728df035dcf80e8754588a3b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fbee56e9fd9ad645d597265c45d08b94c328728df035dcf80e8754588a3b89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fbee56e9fd9ad645d597265c45d08b94c328728df035dcf80e8754588a3b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fbee56e9fd9ad645d597265c45d08b94c328728df035dcf80e8754588a3b89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8fbee56e9fd9ad645d597265c45d08b94c328728df035dcf80e8754588a3b89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fbee56e9fd9ad645d597265c45d08b94c328728df035dcf80e8754588a3b89"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fbee56e9fd9ad645d597265c45d08b94c328728df035dcf80e8754588a3b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8fbee56e9fd9ad645d597265c45d08b94c328728df035dcf80e8754588a3b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fbee56e9fd9ad645d597265c45d08b94c328728df035dcf80e8754588a3b89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8fbee56e9fd9ad645d597265c45d08b94c328728df035dcf80e8754588a3b89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd"}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fbee56e9fd9ad645d597265c45d08b94c328728df035dcf80e8754588a3b89"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05"}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7946ee8f4588e0630658a2fde068fca6a314b1fb017791d5ecbbda68e2aabc55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7946ee8f4588e0630658a2fde068fca6a314b1fb017791d5ecbbda68e2aabc55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7946ee8f4588e0630658a2fde068fca6a314b1fb017791d5ecbbda68e2aabc55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7946ee8f4588e0630658a2fde068fca6a314b1fb017791d5ecbbda68e2aabc55"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7946ee8f4588e0630658a2fde068fca6a314b1fb017791d5ecbbda68e2aabc55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7946ee8f4588e0630658a2fde068fca6a314b1fb017791d5ecbbda68e2aabc55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7946ee8f4588e0630658a2fde068fca6a314b1fb017791d5ecbbda68e2aabc55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7946ee8f4588e0630658a2fde068fca6a314b1fb017791d5ecbbda68e2aabc55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7946ee8f4588e0630658a2fde068fca6a314b1fb017791d5ecbbda68e2aabc55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7946ee8f4588e0630658a2fde068fca6a314b1fb017791d5ecbbda68e2aabc55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"}
{"level":"error","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7946ee8f4588e0630658a2fde068fca6a314b1fb017791d5ecbbda68e2aabc55","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7946ee8f4588e0630658a2fde068fca6a314b1fb017791d5ecbbda68e2aabc55\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7946ee8f4588e0630658a2fde068fca6a314b1fb017791d5ecbbda68e2aabc55"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7946ee8f4588e0630658a2fde068fca6a314b1fb017791d5ecbbda68e2aabc55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5273195a5a11e5dd8f3b04cb42e9c824f2fe689ff750ef291f39014929b947ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5273195a5a11e5dd8f3b04cb42e9c824f2fe689ff750ef291f39014929b947ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5273195a5a11e5dd8f3b04cb42e9c824f2fe689ff750ef291f39014929b947ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5273195a5a11e5dd8f3b04cb42e9c824f2fe689ff750ef291f39014929b947ea"}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5273195a5a11e5dd8f3b04cb42e9c824f2fe689ff750ef291f39014929b947ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5273195a5a11e5dd8f3b04cb42e9c824f2fe689ff750ef291f39014929b947ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5273195a5a11e5dd8f3b04cb42e9c824f2fe689ff750ef291f39014929b947ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5273195a5a11e5dd8f3b04cb42e9c824f2fe689ff750ef291f39014929b947ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5273195a5a11e5dd8f3b04cb42e9c824f2fe689ff750ef291f39014929b947ea"}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d"}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d"}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d"}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef"}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d"}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef"}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef"}
{"level":"debug","ts":"2026-07-06T21:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:56:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:56:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef"}
{"level":"info","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f61ea07-e58c-481f-86a6-32e701e5ebbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:43396","PortSpecifier":{"PortValue":43396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f61ea07-e58c-481f-86a6-32e701e5ebbd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f61ea07-e58c-481f-86a6-32e701e5ebbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:43396","PortSpecifier":{"PortValue":43396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783374983,"nanos":88750136},"http":{"id":"7f61ea07-e58c-481f-86a6-32e701e5ebbd","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7f61ea07-e58c-481f-86a6-32e701e5ebbd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f61ea07-e58c-481f-86a6-32e701e5ebbd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f61ea07-e58c-481f-86a6-32e701e5ebbd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f61ea07-e58c-481f-86a6-32e701e5ebbd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f61ea07-e58c-481f-86a6-32e701e5ebbd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f61ea07-e58c-481f-86a6-32e701e5ebbd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/auth-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7f61ea07-e58c-481f-86a6-32e701e5ebbd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f61ea07-e58c-481f-86a6-32e701e5ebbd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f61ea07-e58c-481f-86a6-32e701e5ebbd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f61ea07-e58c-481f-86a6-32e701e5ebbd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f61ea07-e58c-481f-86a6-32e701e5ebbd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c13e2c9-0afb-4f67-a61b-edeffb7f3934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:42670","PortSpecifier":{"PortValue":42670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c13e2c9-0afb-4f67-a61b-edeffb7f3934","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c13e2c9-0afb-4f67-a61b-edeffb7f3934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:42670","PortSpecifier":{"PortValue":42670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783374983,"nanos":168925411},"http":{"id":"7c13e2c9-0afb-4f67-a61b-edeffb7f3934","method":"POST","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c13e2c9-0afb-4f67-a61b-edeffb7f3934","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c13e2c9-0afb-4f67-a61b-edeffb7f3934","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c13e2c9-0afb-4f67-a61b-edeffb7f3934","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c13e2c9-0afb-4f67-a61b-edeffb7f3934","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c13e2c9-0afb-4f67-a61b-edeffb7f3934","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c13e2c9-0afb-4f67-a61b-edeffb7f3934","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/auth-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c13e2c9-0afb-4f67-a61b-edeffb7f3934","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c13e2c9-0afb-4f67-a61b-edeffb7f3934","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c13e2c9-0afb-4f67-a61b-edeffb7f3934","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c13e2c9-0afb-4f67-a61b-edeffb7f3934","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c13e2c9-0afb-4f67-a61b-edeffb7f3934","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0ed81d5-6a13-424e-b5f4-97068ccc011b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:43406","PortSpecifier":{"PortValue":43406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0ed81d5-6a13-424e-b5f4-97068ccc011b","method":"GET","path":"/maas-api/v1/api-keys/603ead9b-5516-4a83-82f5-e5d24ffc2e14","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0ed81d5-6a13-424e-b5f4-97068ccc011b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:43406","PortSpecifier":{"PortValue":43406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783374983,"nanos":251109101},"http":{"id":"d0ed81d5-6a13-424e-b5f4-97068ccc011b","method":"GET","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/603ead9b-5516-4a83-82f5-e5d24ffc2e14",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d0ed81d5-6a13-424e-b5f4-97068ccc011b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0ed81d5-6a13-424e-b5f4-97068ccc011b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0ed81d5-6a13-424e-b5f4-97068ccc011b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/603ead9b-5516-4a83-82f5-e5d24ffc2e14",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0ed81d5-6a13-424e-b5f4-97068ccc011b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0ed81d5-6a13-424e-b5f4-97068ccc011b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0ed81d5-6a13-424e-b5f4-97068ccc011b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/auth-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0ed81d5-6a13-424e-b5f4-97068ccc011b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0ed81d5-6a13-424e-b5f4-97068ccc011b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0ed81d5-6a13-424e-b5f4-97068ccc011b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0ed81d5-6a13-424e-b5f4-97068ccc011b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0ed81d5-6a13-424e-b5f4-97068ccc011b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd7f0cb3-f1fd-4939-b92e-fc86053b81bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:42672","PortSpecifier":{"PortValue":42672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd7f0cb3-f1fd-4939-b92e-fc86053b81bb","method":"GET","path":"/maas-api/v1/api-keys/dcbfa8c5-a21b-4f0f-8af8-5d6283441dfb","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd7f0cb3-f1fd-4939-b92e-fc86053b81bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:42672","PortSpecifier":{"PortValue":42672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783374983,"nanos":283610813},"http":{"id":"bd7f0cb3-f1fd-4939-b92e-fc86053b81bb","method":"GET","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dcbfa8c5-a21b-4f0f-8af8-5d6283441dfb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd7f0cb3-f1fd-4939-b92e-fc86053b81bb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd7f0cb3-f1fd-4939-b92e-fc86053b81bb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd7f0cb3-f1fd-4939-b92e-fc86053b81bb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dcbfa8c5-a21b-4f0f-8af8-5d6283441dfb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd7f0cb3-f1fd-4939-b92e-fc86053b81bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd7f0cb3-f1fd-4939-b92e-fc86053b81bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd7f0cb3-f1fd-4939-b92e-fc86053b81bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/auth-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd7f0cb3-f1fd-4939-b92e-fc86053b81bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd7f0cb3-f1fd-4939-b92e-fc86053b81bb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd7f0cb3-f1fd-4939-b92e-fc86053b81bb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd7f0cb3-f1fd-4939-b92e-fc86053b81bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:56:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd7f0cb3-f1fd-4939-b92e-fc86053b81bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1923f24-9f07-49a9-aef8-50c4bd7a74ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:44060","PortSpecifier":{"PortValue":44060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1923f24-9f07-49a9-aef8-50c4bd7a74ff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1923f24-9f07-49a9-aef8-50c4bd7a74ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:44060","PortSpecifier":{"PortValue":44060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783374998,"nanos":294353370},"http":{"id":"c1923f24-9f07-49a9-aef8-50c4bd7a74ff","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1923f24-9f07-49a9-aef8-50c4bd7a74ff","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1923f24-9f07-49a9-aef8-50c4bd7a74ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1923f24-9f07-49a9-aef8-50c4bd7a74ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1923f24-9f07-49a9-aef8-50c4bd7a74ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1923f24-9f07-49a9-aef8-50c4bd7a74ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1923f24-9f07-49a9-aef8-50c4bd7a74ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/auth-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1923f24-9f07-49a9-aef8-50c4bd7a74ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1923f24-9f07-49a9-aef8-50c4bd7a74ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1923f24-9f07-49a9-aef8-50c4bd7a74ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1923f24-9f07-49a9-aef8-50c4bd7a74ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1923f24-9f07-49a9-aef8-50c4bd7a74ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5addff84-4f6c-43f9-b96a-d6cc7bdd9335","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:32788","PortSpecifier":{"PortValue":32788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5addff84-4f6c-43f9-b96a-d6cc7bdd9335","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5addff84-4f6c-43f9-b96a-d6cc7bdd9335","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:32788","PortSpecifier":{"PortValue":32788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783374998,"nanos":335837365},"http":{"id":"5addff84-4f6c-43f9-b96a-d6cc7bdd9335","method":"POST","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5addff84-4f6c-43f9-b96a-d6cc7bdd9335","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5addff84-4f6c-43f9-b96a-d6cc7bdd9335","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5addff84-4f6c-43f9-b96a-d6cc7bdd9335","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5addff84-4f6c-43f9-b96a-d6cc7bdd9335","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5addff84-4f6c-43f9-b96a-d6cc7bdd9335","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5addff84-4f6c-43f9-b96a-d6cc7bdd9335","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/auth-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5addff84-4f6c-43f9-b96a-d6cc7bdd9335","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5addff84-4f6c-43f9-b96a-d6cc7bdd9335","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5addff84-4f6c-43f9-b96a-d6cc7bdd9335","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5addff84-4f6c-43f9-b96a-d6cc7bdd9335","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5addff84-4f6c-43f9-b96a-d6cc7bdd9335","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c342db6-e53f-4e33-ab65-b99b84064059","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:44072","PortSpecifier":{"PortValue":44072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c342db6-e53f-4e33-ab65-b99b84064059","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c342db6-e53f-4e33-ab65-b99b84064059","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:44072","PortSpecifier":{"PortValue":44072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783374998,"nanos":395768551},"http":{"id":"2c342db6-e53f-4e33-ab65-b99b84064059","method":"GET","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c342db6-e53f-4e33-ab65-b99b84064059","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1DtIoalGSy0ikNulz_BZ6Jqxu0RTu2dRWhrGyWChH0CFYTMgG9IJosKYUVuaE"}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2c342db6-e53f-4e33-ab65-b99b84064059","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1DtIoalGSy0ikNulz_BZ6Jqxu0RTu2dRWhrGyWChH0CFYTMgG9IJosKYUVuaE\"}"}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2c342db6-e53f-4e33-ab65-b99b84064059","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5d3a89db-194a-4ffb-b2ab-a2f378387e4d","keyName":"e2e-auth-iso-a-d55ea6","subscription":"e2e-auth-iso-030e82","tenant":"e2e-shared-a-ace6c2","userId":"5d3a89db-194a-4ffb-b2ab-a2f378387e4d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c342db6-e53f-4e33-ab65-b99b84064059","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c342db6-e53f-4e33-ab65-b99b84064059","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c342db6-e53f-4e33-ab65-b99b84064059","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c342db6-e53f-4e33-ab65-b99b84064059","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/auth-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c342db6-e53f-4e33-ab65-b99b84064059","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c342db6-e53f-4e33-ab65-b99b84064059","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c342db6-e53f-4e33-ab65-b99b84064059","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c342db6-e53f-4e33-ab65-b99b84064059","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-030e82"}
{"level":"info","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c342db6-e53f-4e33-ab65-b99b84064059","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:56:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c342db6-e53f-4e33-ab65-b99b84064059","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"defb5eda-d221-465a-87d9-5e08143199dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38120","PortSpecifier":{"PortValue":38120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"defb5eda-d221-465a-87d9-5e08143199dd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"defb5eda-d221-465a-87d9-5e08143199dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38120","PortSpecifier":{"PortValue":38120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375013,"nanos":432109202},"http":{"id":"defb5eda-d221-465a-87d9-5e08143199dd","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"defb5eda-d221-465a-87d9-5e08143199dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"defb5eda-d221-465a-87d9-5e08143199dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"defb5eda-d221-465a-87d9-5e08143199dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"defb5eda-d221-465a-87d9-5e08143199dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"defb5eda-d221-465a-87d9-5e08143199dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"defb5eda-d221-465a-87d9-5e08143199dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/auth-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"defb5eda-d221-465a-87d9-5e08143199dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"defb5eda-d221-465a-87d9-5e08143199dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"defb5eda-d221-465a-87d9-5e08143199dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"defb5eda-d221-465a-87d9-5e08143199dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"defb5eda-d221-465a-87d9-5e08143199dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15bf3238-a86e-4e7f-8b7e-efc9041ea4d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:50140","PortSpecifier":{"PortValue":50140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15bf3238-a86e-4e7f-8b7e-efc9041ea4d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15bf3238-a86e-4e7f-8b7e-efc9041ea4d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:50140","PortSpecifier":{"PortValue":50140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375013,"nanos":477770951},"http":{"id":"15bf3238-a86e-4e7f-8b7e-efc9041ea4d2","method":"POST","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15bf3238-a86e-4e7f-8b7e-efc9041ea4d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15bf3238-a86e-4e7f-8b7e-efc9041ea4d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15bf3238-a86e-4e7f-8b7e-efc9041ea4d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bf3238-a86e-4e7f-8b7e-efc9041ea4d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bf3238-a86e-4e7f-8b7e-efc9041ea4d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bf3238-a86e-4e7f-8b7e-efc9041ea4d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/auth-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15bf3238-a86e-4e7f-8b7e-efc9041ea4d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bf3238-a86e-4e7f-8b7e-efc9041ea4d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bf3238-a86e-4e7f-8b7e-efc9041ea4d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15bf3238-a86e-4e7f-8b7e-efc9041ea4d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15bf3238-a86e-4e7f-8b7e-efc9041ea4d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8d824a0-663d-4e08-a16d-33824e76fbae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:50150","PortSpecifier":{"PortValue":50150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8d824a0-663d-4e08-a16d-33824e76fbae","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8d824a0-663d-4e08-a16d-33824e76fbae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:50150","PortSpecifier":{"PortValue":50150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375013,"nanos":526223262},"http":{"id":"c8d824a0-663d-4e08-a16d-33824e76fbae","method":"GET","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8d824a0-663d-4e08-a16d-33824e76fbae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14uqBxycbHX7NOdEV_IENSB6V9quZCQWQnZSOHGYjH74CTaOKmKuUq17sknxK"}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8d824a0-663d-4e08-a16d-33824e76fbae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d392e3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14uqBxycbHX7NOdEV_IENSB6V9quZCQWQnZSOHGYjH74CTaOKmKuUq17sknxK\"}"}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8d824a0-663d-4e08-a16d-33824e76fbae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d392e3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8d824a0-663d-4e08-a16d-33824e76fbae","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8d824a0-663d-4e08-a16d-33824e76fbae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c8d824a0-663d-4e08-a16d-33824e76fbae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8d824a0-663d-4e08-a16d-33824e76fbae","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T21:56:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8d824a0-663d-4e08-a16d-33824e76fbae","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cbd4c40-8e4c-4dd3-a34e-76adf7359bda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:55790","PortSpecifier":{"PortValue":55790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5cbd4c40-8e4c-4dd3-a34e-76adf7359bda","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cbd4c40-8e4c-4dd3-a34e-76adf7359bda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:55790","PortSpecifier":{"PortValue":55790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375030,"nanos":723221756},"http":{"id":"5cbd4c40-8e4c-4dd3-a34e-76adf7359bda","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5cbd4c40-8e4c-4dd3-a34e-76adf7359bda","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5cbd4c40-8e4c-4dd3-a34e-76adf7359bda","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5cbd4c40-8e4c-4dd3-a34e-76adf7359bda","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cbd4c40-8e4c-4dd3-a34e-76adf7359bda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cbd4c40-8e4c-4dd3-a34e-76adf7359bda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cbd4c40-8e4c-4dd3-a34e-76adf7359bda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/auth-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5cbd4c40-8e4c-4dd3-a34e-76adf7359bda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cbd4c40-8e4c-4dd3-a34e-76adf7359bda","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cbd4c40-8e4c-4dd3-a34e-76adf7359bda","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cbd4c40-8e4c-4dd3-a34e-76adf7359bda","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cbd4c40-8e4c-4dd3-a34e-76adf7359bda","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33f179d2-7e2b-4b1e-8738-fdc8b28367df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:42638","PortSpecifier":{"PortValue":42638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33f179d2-7e2b-4b1e-8738-fdc8b28367df","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33f179d2-7e2b-4b1e-8738-fdc8b28367df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:42638","PortSpecifier":{"PortValue":42638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375030,"nanos":763228215},"http":{"id":"33f179d2-7e2b-4b1e-8738-fdc8b28367df","method":"POST","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33f179d2-7e2b-4b1e-8738-fdc8b28367df","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33f179d2-7e2b-4b1e-8738-fdc8b28367df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33f179d2-7e2b-4b1e-8738-fdc8b28367df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33f179d2-7e2b-4b1e-8738-fdc8b28367df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33f179d2-7e2b-4b1e-8738-fdc8b28367df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33f179d2-7e2b-4b1e-8738-fdc8b28367df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/auth-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33f179d2-7e2b-4b1e-8738-fdc8b28367df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33f179d2-7e2b-4b1e-8738-fdc8b28367df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33f179d2-7e2b-4b1e-8738-fdc8b28367df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33f179d2-7e2b-4b1e-8738-fdc8b28367df","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33f179d2-7e2b-4b1e-8738-fdc8b28367df","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54705ff9-fe25-4f27-8fc2-08a73268c501","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:55798","PortSpecifier":{"PortValue":55798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54705ff9-fe25-4f27-8fc2-08a73268c501","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54705ff9-fe25-4f27-8fc2-08a73268c501","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:55798","PortSpecifier":{"PortValue":55798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375030,"nanos":798860031},"http":{"id":"54705ff9-fe25-4f27-8fc2-08a73268c501","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54705ff9-fe25-4f27-8fc2-08a73268c501","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54705ff9-fe25-4f27-8fc2-08a73268c501","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54705ff9-fe25-4f27-8fc2-08a73268c501","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54705ff9-fe25-4f27-8fc2-08a73268c501","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54705ff9-fe25-4f27-8fc2-08a73268c501","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54705ff9-fe25-4f27-8fc2-08a73268c501","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/auth-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54705ff9-fe25-4f27-8fc2-08a73268c501","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54705ff9-fe25-4f27-8fc2-08a73268c501","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54705ff9-fe25-4f27-8fc2-08a73268c501","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54705ff9-fe25-4f27-8fc2-08a73268c501","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54705ff9-fe25-4f27-8fc2-08a73268c501","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1396cd8-0480-47c1-be78-3a464943d41a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:42646","PortSpecifier":{"PortValue":42646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1396cd8-0480-47c1-be78-3a464943d41a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1396cd8-0480-47c1-be78-3a464943d41a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:42646","PortSpecifier":{"PortValue":42646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375030,"nanos":834669288},"http":{"id":"c1396cd8-0480-47c1-be78-3a464943d41a","method":"POST","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1396cd8-0480-47c1-be78-3a464943d41a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1396cd8-0480-47c1-be78-3a464943d41a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1396cd8-0480-47c1-be78-3a464943d41a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1396cd8-0480-47c1-be78-3a464943d41a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1396cd8-0480-47c1-be78-3a464943d41a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1396cd8-0480-47c1-be78-3a464943d41a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/auth-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1396cd8-0480-47c1-be78-3a464943d41a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1396cd8-0480-47c1-be78-3a464943d41a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1396cd8-0480-47c1-be78-3a464943d41a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1396cd8-0480-47c1-be78-3a464943d41a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:57:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1396cd8-0480-47c1-be78-3a464943d41a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:57:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2a1bdcd-0c28-40ea-b91b-283df830b28b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:56592","PortSpecifier":{"PortValue":56592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2a1bdcd-0c28-40ea-b91b-283df830b28b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:57:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2a1bdcd-0c28-40ea-b91b-283df830b28b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:56592","PortSpecifier":{"PortValue":56592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375047,"nanos":983001047},"http":{"id":"f2a1bdcd-0c28-40ea-b91b-283df830b28b","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f2a1bdcd-0c28-40ea-b91b-283df830b28b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:57:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2a1bdcd-0c28-40ea-b91b-283df830b28b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2a1bdcd-0c28-40ea-b91b-283df830b28b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2a1bdcd-0c28-40ea-b91b-283df830b28b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2a1bdcd-0c28-40ea-b91b-283df830b28b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2a1bdcd-0c28-40ea-b91b-283df830b28b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/auth-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f2a1bdcd-0c28-40ea-b91b-283df830b28b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:57:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2a1bdcd-0c28-40ea-b91b-283df830b28b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:57:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2a1bdcd-0c28-40ea-b91b-283df830b28b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T21:57:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2a1bdcd-0c28-40ea-b91b-283df830b28b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:57:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2a1bdcd-0c28-40ea-b91b-283df830b28b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1ab929a-3437-4a49-871d-22d88972e26c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:44442","PortSpecifier":{"PortValue":44442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1ab929a-3437-4a49-871d-22d88972e26c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1ab929a-3437-4a49-871d-22d88972e26c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:44442","PortSpecifier":{"PortValue":44442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375048,"nanos":25408214},"http":{"id":"c1ab929a-3437-4a49-871d-22d88972e26c","method":"POST","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1ab929a-3437-4a49-871d-22d88972e26c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1ab929a-3437-4a49-871d-22d88972e26c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1ab929a-3437-4a49-871d-22d88972e26c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ab929a-3437-4a49-871d-22d88972e26c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ab929a-3437-4a49-871d-22d88972e26c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ab929a-3437-4a49-871d-22d88972e26c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/auth-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1ab929a-3437-4a49-871d-22d88972e26c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1ab929a-3437-4a49-871d-22d88972e26c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1ab929a-3437-4a49-871d-22d88972e26c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1ab929a-3437-4a49-871d-22d88972e26c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1ab929a-3437-4a49-871d-22d88972e26c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88b37d82-6529-455e-a78d-728881a73012","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:44444","PortSpecifier":{"PortValue":44444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88b37d82-6529-455e-a78d-728881a73012","method":"GET","path":"/maas-api/v1/api-keys/c0afeed5-9700-471f-a8ff-49b4ba98c7c7","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88b37d82-6529-455e-a78d-728881a73012","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:44444","PortSpecifier":{"PortValue":44444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375048,"nanos":61496420},"http":{"id":"88b37d82-6529-455e-a78d-728881a73012","method":"GET","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c0afeed5-9700-471f-a8ff-49b4ba98c7c7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88b37d82-6529-455e-a78d-728881a73012","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88b37d82-6529-455e-a78d-728881a73012","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88b37d82-6529-455e-a78d-728881a73012","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c0afeed5-9700-471f-a8ff-49b4ba98c7c7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88b37d82-6529-455e-a78d-728881a73012","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88b37d82-6529-455e-a78d-728881a73012","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88b37d82-6529-455e-a78d-728881a73012","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/auth-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88b37d82-6529-455e-a78d-728881a73012","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88b37d82-6529-455e-a78d-728881a73012","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88b37d82-6529-455e-a78d-728881a73012","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88b37d82-6529-455e-a78d-728881a73012","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88b37d82-6529-455e-a78d-728881a73012","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"347ec19f-064f-4e2e-86bd-4f1af11bb58f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:56604","PortSpecifier":{"PortValue":56604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"347ec19f-064f-4e2e-86bd-4f1af11bb58f","method":"GET","path":"/maas-api/v1/api-keys/c0afeed5-9700-471f-a8ff-49b4ba98c7c7","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"347ec19f-064f-4e2e-86bd-4f1af11bb58f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:56604","PortSpecifier":{"PortValue":56604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375048,"nanos":104793734},"http":{"id":"347ec19f-064f-4e2e-86bd-4f1af11bb58f","method":"GET","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c0afeed5-9700-471f-a8ff-49b4ba98c7c7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"347ec19f-064f-4e2e-86bd-4f1af11bb58f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"347ec19f-064f-4e2e-86bd-4f1af11bb58f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"347ec19f-064f-4e2e-86bd-4f1af11bb58f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c0afeed5-9700-471f-a8ff-49b4ba98c7c7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"347ec19f-064f-4e2e-86bd-4f1af11bb58f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"347ec19f-064f-4e2e-86bd-4f1af11bb58f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"347ec19f-064f-4e2e-86bd-4f1af11bb58f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/auth-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"347ec19f-064f-4e2e-86bd-4f1af11bb58f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"347ec19f-064f-4e2e-86bd-4f1af11bb58f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"347ec19f-064f-4e2e-86bd-4f1af11bb58f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"347ec19f-064f-4e2e-86bd-4f1af11bb58f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"347ec19f-064f-4e2e-86bd-4f1af11bb58f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9651903-bc56-4847-8d30-41e474b9dc66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:58454","PortSpecifier":{"PortValue":58454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9651903-bc56-4847-8d30-41e474b9dc66","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9651903-bc56-4847-8d30-41e474b9dc66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:58454","PortSpecifier":{"PortValue":58454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375065,"nanos":251907214},"http":{"id":"d9651903-bc56-4847-8d30-41e474b9dc66","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d9651903-bc56-4847-8d30-41e474b9dc66","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9651903-bc56-4847-8d30-41e474b9dc66","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9651903-bc56-4847-8d30-41e474b9dc66","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9651903-bc56-4847-8d30-41e474b9dc66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9651903-bc56-4847-8d30-41e474b9dc66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9651903-bc56-4847-8d30-41e474b9dc66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/auth-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d9651903-bc56-4847-8d30-41e474b9dc66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9651903-bc56-4847-8d30-41e474b9dc66","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9651903-bc56-4847-8d30-41e474b9dc66","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9651903-bc56-4847-8d30-41e474b9dc66","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9651903-bc56-4847-8d30-41e474b9dc66","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f9c4534-a7cd-4db8-9a79-472b717bbe0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52302","PortSpecifier":{"PortValue":52302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f9c4534-a7cd-4db8-9a79-472b717bbe0f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f9c4534-a7cd-4db8-9a79-472b717bbe0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52302","PortSpecifier":{"PortValue":52302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375065,"nanos":288011197},"http":{"id":"8f9c4534-a7cd-4db8-9a79-472b717bbe0f","method":"POST","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f9c4534-a7cd-4db8-9a79-472b717bbe0f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f9c4534-a7cd-4db8-9a79-472b717bbe0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f9c4534-a7cd-4db8-9a79-472b717bbe0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f9c4534-a7cd-4db8-9a79-472b717bbe0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f9c4534-a7cd-4db8-9a79-472b717bbe0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f9c4534-a7cd-4db8-9a79-472b717bbe0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/auth-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f9c4534-a7cd-4db8-9a79-472b717bbe0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f9c4534-a7cd-4db8-9a79-472b717bbe0f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f9c4534-a7cd-4db8-9a79-472b717bbe0f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f9c4534-a7cd-4db8-9a79-472b717bbe0f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f9c4534-a7cd-4db8-9a79-472b717bbe0f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22c33974-d874-4eea-b4b5-94512a5c22a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:58456","PortSpecifier":{"PortValue":58456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22c33974-d874-4eea-b4b5-94512a5c22a0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22c33974-d874-4eea-b4b5-94512a5c22a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:58456","PortSpecifier":{"PortValue":58456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375065,"nanos":325759606},"http":{"id":"22c33974-d874-4eea-b4b5-94512a5c22a0","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22c33974-d874-4eea-b4b5-94512a5c22a0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9B4yzqHD7kiBwAeM_qgkKCVowDK9tFzpPqdZCJXBMGwBQGFkUi9CQmJrk84I"}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"22c33974-d874-4eea-b4b5-94512a5c22a0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9B4yzqHD7kiBwAeM_qgkKCVowDK9tFzpPqdZCJXBMGwBQGFkUi9CQmJrk84I\"}"}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"22c33974-d874-4eea-b4b5-94512a5c22a0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"76f1067b-a330-47f9-b242-001ffdfb4e8b","keyName":"e2e-auth-iso-a-1a7c99","subscription":"e2e-auth-iso-1f8426","tenant":"e2e-shared-a-ace6c2","userId":"76f1067b-a330-47f9-b242-001ffdfb4e8b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22c33974-d874-4eea-b4b5-94512a5c22a0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22c33974-d874-4eea-b4b5-94512a5c22a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22c33974-d874-4eea-b4b5-94512a5c22a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22c33974-d874-4eea-b4b5-94512a5c22a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/auth-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22c33974-d874-4eea-b4b5-94512a5c22a0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22c33974-d874-4eea-b4b5-94512a5c22a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22c33974-d874-4eea-b4b5-94512a5c22a0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-1f8426"}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22c33974-d874-4eea-b4b5-94512a5c22a0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22c33974-d874-4eea-b4b5-94512a5c22a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:57:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22c33974-d874-4eea-b4b5-94512a5c22a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94053ebfd97ba964c5f44f7ffc6fdcc247564ad0dc09d71089ec1f3b708a50ef"}
{"level":"info","ts":"2026-07-06T21:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0182da693b3961debad24a95f2687a95a2b33a4bd00131a4c636b0cff99572ab"}
{"level":"info","ts":"2026-07-06T21:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7946ee8f4588e0630658a2fde068fca6a314b1fb017791d5ecbbda68e2aabc55"}
{"level":"info","ts":"2026-07-06T21:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d05a9effddb006d269ff2ad128131c528ccf8e12a8a1038a232686d0f54eb9b"}
{"level":"info","ts":"2026-07-06T21:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02af1878050498eff663f5d14b16e5762cec774ebbd58201dc74d43d8ebf8f05"}
{"level":"info","ts":"2026-07-06T21:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/801beb7a3c373d07346269475c2df7b9b63f0161c11ac25f82832ddbe245931d"}
{"level":"info","ts":"2026-07-06T21:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5fd51491c2f65a562021bd9defd2dc0f03915deba75fe8ba346623108e88ce6"}
{"level":"info","ts":"2026-07-06T21:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8668508b8927dae7d29a168e650cf1df516821d64d8958a5435c1e82038ccb8"}
{"level":"info","ts":"2026-07-06T21:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2d40872b9bad5ed9036933c233a43f8334075ed8428acc490edb2eb394a1bfd"}
{"level":"info","ts":"2026-07-06T21:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab669459e73fe56cdc90209a66d5fc731cfeabca1535071713cb1cbdabcd7a6a"}
{"level":"info","ts":"2026-07-06T21:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3ce0a9ffb6ac35c2a22dd015b0d2b3614fb565811a751dd534ac3c7553a097d"}
{"level":"info","ts":"2026-07-06T21:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8fbee56e9fd9ad645d597265c45d08b94c328728df035dcf80e8754588a3b89"}
{"level":"info","ts":"2026-07-06T21:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5273195a5a11e5dd8f3b04cb42e9c824f2fe689ff750ef291f39014929b947ea"}
{"level":"info","ts":"2026-07-06T21:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c8583f47bdce6229a80407ff5681c5ac50e445a137c8a2ef6e44031f25afc39"}
{"level":"info","ts":"2026-07-06T21:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03dfee380a54e43f67d24d0a36068cf796516e943440c7038aca504477b4965d"}
{"level":"info","ts":"2026-07-06T21:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e77178afedb6fbfd7d0f8a5792fc9a945e5c648aa1b1d64f280f436a7fb45a2"}
{"level":"debug","ts":"2026-07-06T21:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbfa2ad5434d0b28806c3e5e4ddd0adaa68cd6639307327b471592ee31b801a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbfa2ad5434d0b28806c3e5e4ddd0adaa68cd6639307327b471592ee31b801a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbfa2ad5434d0b28806c3e5e4ddd0adaa68cd6639307327b471592ee31b801a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbfa2ad5434d0b28806c3e5e4ddd0adaa68cd6639307327b471592ee31b801a"}
{"level":"debug","ts":"2026-07-06T21:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbfa2ad5434d0b28806c3e5e4ddd0adaa68cd6639307327b471592ee31b801a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbfa2ad5434d0b28806c3e5e4ddd0adaa68cd6639307327b471592ee31b801a"}
{"level":"debug","ts":"2026-07-06T21:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbfa2ad5434d0b28806c3e5e4ddd0adaa68cd6639307327b471592ee31b801a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbfa2ad5434d0b28806c3e5e4ddd0adaa68cd6639307327b471592ee31b801a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbfa2ad5434d0b28806c3e5e4ddd0adaa68cd6639307327b471592ee31b801a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbfa2ad5434d0b28806c3e5e4ddd0adaa68cd6639307327b471592ee31b801a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbfa2ad5434d0b28806c3e5e4ddd0adaa68cd6639307327b471592ee31b801a"}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53"}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53"}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53"}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53"}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9beca702a68cd423d13a7cf936dcfdaa14ddc11dfaf7ceea6a38f3dbd6393d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9beca702a68cd423d13a7cf936dcfdaa14ddc11dfaf7ceea6a38f3dbd6393d87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9beca702a68cd423d13a7cf936dcfdaa14ddc11dfaf7ceea6a38f3dbd6393d87"}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9beca702a68cd423d13a7cf936dcfdaa14ddc11dfaf7ceea6a38f3dbd6393d87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9beca702a68cd423d13a7cf936dcfdaa14ddc11dfaf7ceea6a38f3dbd6393d87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9beca702a68cd423d13a7cf936dcfdaa14ddc11dfaf7ceea6a38f3dbd6393d87"}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9beca702a68cd423d13a7cf936dcfdaa14ddc11dfaf7ceea6a38f3dbd6393d87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9beca702a68cd423d13a7cf936dcfdaa14ddc11dfaf7ceea6a38f3dbd6393d87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53"}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9beca702a68cd423d13a7cf936dcfdaa14ddc11dfaf7ceea6a38f3dbd6393d87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9beca702a68cd423d13a7cf936dcfdaa14ddc11dfaf7ceea6a38f3dbd6393d87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9beca702a68cd423d13a7cf936dcfdaa14ddc11dfaf7ceea6a38f3dbd6393d87"}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586"}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94"}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586"}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94"}
{"level":"error","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586"}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7"}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94"}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586"}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7"}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94"}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586"}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7"}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94"}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7"}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583"}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583"}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583"}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"}
{"level":"info","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"}
{"level":"info","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"}
{"level":"debug","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"}
{"level":"debug","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"}
{"level":"debug","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"}
{"level":"info","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"}
{"level":"debug","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"}
{"level":"info","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"}
{"level":"debug","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9"}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9"}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe"}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32aac02b85dc59ed21ca6cf52217e0a421867f72a1bf762c732d739c3f98dde0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32aac02b85dc59ed21ca6cf52217e0a421867f72a1bf762c732d739c3f98dde0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32aac02b85dc59ed21ca6cf52217e0a421867f72a1bf762c732d739c3f98dde0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32aac02b85dc59ed21ca6cf52217e0a421867f72a1bf762c732d739c3f98dde0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32aac02b85dc59ed21ca6cf52217e0a421867f72a1bf762c732d739c3f98dde0"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32aac02b85dc59ed21ca6cf52217e0a421867f72a1bf762c732d739c3f98dde0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32aac02b85dc59ed21ca6cf52217e0a421867f72a1bf762c732d739c3f98dde0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32aac02b85dc59ed21ca6cf52217e0a421867f72a1bf762c732d739c3f98dde0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32aac02b85dc59ed21ca6cf52217e0a421867f72a1bf762c732d739c3f98dde0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32aac02b85dc59ed21ca6cf52217e0a421867f72a1bf762c732d739c3f98dde0"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f916ff172e6a9b3c173db851c51facf25a92cc4e0a1ebf63d1ba730c81870eef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f916ff172e6a9b3c173db851c51facf25a92cc4e0a1ebf63d1ba730c81870eef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f916ff172e6a9b3c173db851c51facf25a92cc4e0a1ebf63d1ba730c81870eef"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f916ff172e6a9b3c173db851c51facf25a92cc4e0a1ebf63d1ba730c81870eef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f916ff172e6a9b3c173db851c51facf25a92cc4e0a1ebf63d1ba730c81870eef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f916ff172e6a9b3c173db851c51facf25a92cc4e0a1ebf63d1ba730c81870eef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f916ff172e6a9b3c173db851c51facf25a92cc4e0a1ebf63d1ba730c81870eef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92"}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3"}
{"level":"error","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f916ff172e6a9b3c173db851c51facf25a92cc4e0a1ebf63d1ba730c81870eef"}
{"level":"info","ts":"2026-07-06T21:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92"}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92"}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92"}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92"}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e"}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e"}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e"}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbfa2ad5434d0b28806c3e5e4ddd0adaa68cd6639307327b471592ee31b801a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e"}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbfa2ad5434d0b28806c3e5e4ddd0adaa68cd6639307327b471592ee31b801a"}
{"level":"info","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e"}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53"}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32aac02b85dc59ed21ca6cf52217e0a421867f72a1bf762c732d739c3f98dde0"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32aac02b85dc59ed21ca6cf52217e0a421867f72a1bf762c732d739c3f98dde0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:58:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9beca702a68cd423d13a7cf936dcfdaa14ddc11dfaf7ceea6a38f3dbd6393d87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461"}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f916ff172e6a9b3c173db851c51facf25a92cc4e0a1ebf63d1ba730c81870eef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"}
{"level":"debug","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9beca702a68cd423d13a7cf936dcfdaa14ddc11dfaf7ceea6a38f3dbd6393d87"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f916ff172e6a9b3c173db851c51facf25a92cc4e0a1ebf63d1ba730c81870eef"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583"}
{"level":"info","ts":"2026-07-06T21:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586"}
{"level":"info","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa0dcc16-c7e9-4951-afba-cde61b3b0164","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:40478","PortSpecifier":{"PortValue":40478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa0dcc16-c7e9-4951-afba-cde61b3b0164","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa0dcc16-c7e9-4951-afba-cde61b3b0164","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:40478","PortSpecifier":{"PortValue":40478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375139,"nanos":232898639},"http":{"id":"aa0dcc16-c7e9-4951-afba-cde61b3b0164","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa0dcc16-c7e9-4951-afba-cde61b3b0164","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa0dcc16-c7e9-4951-afba-cde61b3b0164","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa0dcc16-c7e9-4951-afba-cde61b3b0164","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa0dcc16-c7e9-4951-afba-cde61b3b0164","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa0dcc16-c7e9-4951-afba-cde61b3b0164","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa0dcc16-c7e9-4951-afba-cde61b3b0164","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/sub-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa0dcc16-c7e9-4951-afba-cde61b3b0164","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa0dcc16-c7e9-4951-afba-cde61b3b0164","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa0dcc16-c7e9-4951-afba-cde61b3b0164","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa0dcc16-c7e9-4951-afba-cde61b3b0164","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa0dcc16-c7e9-4951-afba-cde61b3b0164","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19ca6198-4a1c-4104-9d3f-f45dc6fa44d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:39678","PortSpecifier":{"PortValue":39678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19ca6198-4a1c-4104-9d3f-f45dc6fa44d5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19ca6198-4a1c-4104-9d3f-f45dc6fa44d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:39678","PortSpecifier":{"PortValue":39678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375139,"nanos":276026435},"http":{"id":"19ca6198-4a1c-4104-9d3f-f45dc6fa44d5","method":"POST","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19ca6198-4a1c-4104-9d3f-f45dc6fa44d5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19ca6198-4a1c-4104-9d3f-f45dc6fa44d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19ca6198-4a1c-4104-9d3f-f45dc6fa44d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19ca6198-4a1c-4104-9d3f-f45dc6fa44d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19ca6198-4a1c-4104-9d3f-f45dc6fa44d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19ca6198-4a1c-4104-9d3f-f45dc6fa44d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/sub-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19ca6198-4a1c-4104-9d3f-f45dc6fa44d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19ca6198-4a1c-4104-9d3f-f45dc6fa44d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19ca6198-4a1c-4104-9d3f-f45dc6fa44d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19ca6198-4a1c-4104-9d3f-f45dc6fa44d5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19ca6198-4a1c-4104-9d3f-f45dc6fa44d5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:50720","PortSpecifier":{"PortValue":50720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:50720","PortSpecifier":{"PortValue":50720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375139,"nanos":326611787},"http":{"id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","method":"GET","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IjNIO0QQ4TEGdO9k_3fJDSUYlp8NFxwQX9kDJQl09cmIjWbRunuy3zBDN9I3"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IjNIO0QQ4TEGdO9k_3fJDSUYlp8NFxwQX9kDJQl09cmIjWbRunuy3zBDN9I3\"}"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"77a5c3e7-3dd8-4d1b-b6c5-22ba88262d1c","keyName":"e2e-sub-iso-384944","subscription":"e2e-a-only-6ef5df","tenant":"e2e-shared-a-ace6c2","userId":"77a5c3e7-3dd8-4d1b-b6c5-22ba88262d1c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/sub-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-6ef5df"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70e6ffc5-5699-43d2-aded-c2f6c479a716","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c8062db-f0b4-408e-a879-da67ac0687ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:45422","PortSpecifier":{"PortValue":45422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c8062db-f0b4-408e-a879-da67ac0687ea","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c8062db-f0b4-408e-a879-da67ac0687ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:45422","PortSpecifier":{"PortValue":45422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375139,"nanos":365419271},"http":{"id":"8c8062db-f0b4-408e-a879-da67ac0687ea","method":"GET","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c8062db-f0b4-408e-a879-da67ac0687ea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jKufYB5K1LSDhzvb_bvtISP034VbsOA0oR1h9ut7iBztgVdrviaOyQmoyqWz"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c8062db-f0b4-408e-a879-da67ac0687ea","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d392e3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jKufYB5K1LSDhzvb_bvtISP034VbsOA0oR1h9ut7iBztgVdrviaOyQmoyqWz\"}"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c8062db-f0b4-408e-a879-da67ac0687ea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d392e3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"513775d8-399f-4433-b01a-434f12f1fe70","keyName":"e2e-sub-iso-1e00d1","subscription":"e2e-b-only-6ef5df","tenant":"e2e-shared-b-d392e3","userId":"513775d8-399f-4433-b01a-434f12f1fe70","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c8062db-f0b4-408e-a879-da67ac0687ea","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c8062db-f0b4-408e-a879-da67ac0687ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c8062db-f0b4-408e-a879-da67ac0687ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c8062db-f0b4-408e-a879-da67ac0687ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/sub-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c8062db-f0b4-408e-a879-da67ac0687ea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c8062db-f0b4-408e-a879-da67ac0687ea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c8062db-f0b4-408e-a879-da67ac0687ea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-6ef5df"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c8062db-f0b4-408e-a879-da67ac0687ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c8062db-f0b4-408e-a879-da67ac0687ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:58:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c8062db-f0b4-408e-a879-da67ac0687ea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd540967-54ae-4aa7-9f51-658a5e800e6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38862","PortSpecifier":{"PortValue":38862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd540967-54ae-4aa7-9f51-658a5e800e6c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd540967-54ae-4aa7-9f51-658a5e800e6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38862","PortSpecifier":{"PortValue":38862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375149,"nanos":525781018},"http":{"id":"bd540967-54ae-4aa7-9f51-658a5e800e6c","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd540967-54ae-4aa7-9f51-658a5e800e6c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd540967-54ae-4aa7-9f51-658a5e800e6c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd540967-54ae-4aa7-9f51-658a5e800e6c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd540967-54ae-4aa7-9f51-658a5e800e6c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd540967-54ae-4aa7-9f51-658a5e800e6c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd540967-54ae-4aa7-9f51-658a5e800e6c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/sub-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd540967-54ae-4aa7-9f51-658a5e800e6c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd540967-54ae-4aa7-9f51-658a5e800e6c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd540967-54ae-4aa7-9f51-658a5e800e6c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd540967-54ae-4aa7-9f51-658a5e800e6c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd540967-54ae-4aa7-9f51-658a5e800e6c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14a2df8a-c880-4062-b9a1-1ff50bdde616","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38482","PortSpecifier":{"PortValue":38482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14a2df8a-c880-4062-b9a1-1ff50bdde616","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14a2df8a-c880-4062-b9a1-1ff50bdde616","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38482","PortSpecifier":{"PortValue":38482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375149,"nanos":562313555},"http":{"id":"14a2df8a-c880-4062-b9a1-1ff50bdde616","method":"POST","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"14a2df8a-c880-4062-b9a1-1ff50bdde616","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14a2df8a-c880-4062-b9a1-1ff50bdde616","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14a2df8a-c880-4062-b9a1-1ff50bdde616","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14a2df8a-c880-4062-b9a1-1ff50bdde616","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14a2df8a-c880-4062-b9a1-1ff50bdde616","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14a2df8a-c880-4062-b9a1-1ff50bdde616","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/sub-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"14a2df8a-c880-4062-b9a1-1ff50bdde616","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14a2df8a-c880-4062-b9a1-1ff50bdde616","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14a2df8a-c880-4062-b9a1-1ff50bdde616","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14a2df8a-c880-4062-b9a1-1ff50bdde616","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14a2df8a-c880-4062-b9a1-1ff50bdde616","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38874","PortSpecifier":{"PortValue":38874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38874","PortSpecifier":{"PortValue":38874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375149,"nanos":605998214},"http":{"id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Fet1vI7rFoL3AAlX_wbOjk3Cl3DR9KFu2c3XKTewHicbYazv0ZOVhNMno3GR"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Fet1vI7rFoL3AAlX_wbOjk3Cl3DR9KFu2c3XKTewHicbYazv0ZOVhNMno3GR\"}"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ff2e552b-d695-47b7-8564-af5c2e20cbc8","keyName":"e2e-sub-iso-e2c916","subscription":"e2e-shared-sub-287129","tenant":"e2e-shared-a-ace6c2","userId":"ff2e552b-d695-47b7-8564-af5c2e20cbc8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/sub-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-287129"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62455b3a-595e-4cf6-bfb8-9278d3982a82","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38484","PortSpecifier":{"PortValue":38484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38484","PortSpecifier":{"PortValue":38484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375149,"nanos":634776678},"http":{"id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","method":"POST","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PNm7qkdxRziY392v_euaEDOFetR8KztEu9IXoolU6hAnzQ5hqe0JV4NGpYax"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d392e3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PNm7qkdxRziY392v_euaEDOFetR8KztEu9IXoolU6hAnzQ5hqe0JV4NGpYax\"}"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d392e3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dbb379bc-3efa-4d50-80e7-4f321f760e6a","keyName":"e2e-sub-iso-140141","subscription":"e2e-shared-sub-287129","tenant":"e2e-shared-b-d392e3","userId":"dbb379bc-3efa-4d50-80e7-4f321f760e6a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/sub-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-287129"}
{"level":"info","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T21:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aeeb3e5-1e0c-4da6-b5f4-2b70218fda29","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T21:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9beca702a68cd423d13a7cf936dcfdaa14ddc11dfaf7ceea6a38f3dbd6393d87"}
{"level":"info","ts":"2026-07-06T21:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf579ed41fe6f49653117e4f2c31b0dfbf060243a5aaa3ee9ae79bfed688e5fe"}
{"level":"info","ts":"2026-07-06T21:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/317f1336adfb11bc6be83332c64047b38d01a825894ce9fd447bd142d1829d53"}
{"level":"info","ts":"2026-07-06T21:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31dcadc13c86e229b32a48f15347f5a9ad336aa3e4bc5ff61ede63d98c775a92"}
{"level":"info","ts":"2026-07-06T21:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fbfa2ad5434d0b28806c3e5e4ddd0adaa68cd6639307327b471592ee31b801a"}
{"level":"info","ts":"2026-07-06T21:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca167cfc588c0b1aa8b3ea38f0f70080bc967aa2aae0899426e630fb578a26d9"}
{"level":"info","ts":"2026-07-06T21:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e551c0d7df5c3dbf2d76c7ccde43dfb5d78e7e8511701ae7e5c04781e33bbd7"}
{"level":"info","ts":"2026-07-06T21:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4bd610ae4ef47130894bb574974c2cf9ed925d211bc6c875e4dc6ec5676d461"}
{"level":"info","ts":"2026-07-06T21:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b494c87360228c61ae74c379bbeecc27cd17bf057cde5176d53b5869368de34"}
{"level":"info","ts":"2026-07-06T21:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f916ff172e6a9b3c173db851c51facf25a92cc4e0a1ebf63d1ba730c81870eef"}
{"level":"info","ts":"2026-07-06T21:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/466d49caee92ec76aa3ec30549f83d7d452810c7dd1a91fff8a1dcb3b202dc94"}
{"level":"info","ts":"2026-07-06T21:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa12e38d08a4dbc34e6535c203dd67ce3456f63b81940a52735853dfa9230d13"}
{"level":"info","ts":"2026-07-06T21:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ba1dae7654ec39b910aa6e352eb41be32688e94cee6a7c7304024f51bc49583"}
{"level":"info","ts":"2026-07-06T21:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32aac02b85dc59ed21ca6cf52217e0a421867f72a1bf762c732d739c3f98dde0"}
{"level":"info","ts":"2026-07-06T21:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/394cad27de654775dd379fc19f25a9228ecee3b960908e73d0eb1964eb47a3c3"}
{"level":"info","ts":"2026-07-06T21:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86cafde5949d6d4dd65ac0494244038ed9bb2d80f0b1a4fdb74783735f2a0586"}
{"level":"debug","ts":"2026-07-06T21:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2"}
{"level":"debug","ts":"2026-07-06T21:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2"}
{"level":"debug","ts":"2026-07-06T21:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2"}
{"level":"debug","ts":"2026-07-06T21:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2"}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2"}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79"}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79"}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79"}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c"}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79"}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c"}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236"}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236"}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236"}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236"}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace"}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace"}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace"}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595"}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595"}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595"}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T21:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T21:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"debug","ts":"2026-07-06T22:00:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"debug","ts":"2026-07-06T22:00:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"}
{"level":"error","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c"}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c"}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782"}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782"}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782"}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74"}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74"}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74"}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79"}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782"}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2"}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d"}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08"}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595"}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"info","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35304","PortSpecifier":{"PortValue":35304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35304","PortSpecifier":{"PortValue":35304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375225,"nanos":496142315},"http":{"id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:32902","PortSpecifier":{"PortValue":32902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ab35bd6-a283-4f26-b123-25695e883a51","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:32902","PortSpecifier":{"PortValue":32902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375225,"nanos":542083303},"http":{"id":"6ab35bd6-a283-4f26-b123-25695e883a51","method":"POST","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/rate-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35312","PortSpecifier":{"PortValue":35312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","method":"POST","path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35312","PortSpecifier":{"PortValue":35312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375225,"nanos":588585063},"http":{"id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EdK07igHplYWYsXF_BiFaCEXerpmL2lpcij9vGVA5tIU3oO2CWAe9goHFgw7"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EdK07igHplYWYsXF_BiFaCEXerpmL2lpcij9vGVA5tIU3oO2CWAe9goHFgw7\"}"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","keyName":"e2e-rate-a-7252c3","subscription":"e2e-rate-iso-a-7252c3","tenant":"e2e-shared-a-ace6c2","userId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\",\"requestedSubscription\":\"e2e-rate-iso-a-7252c3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7252c3","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7252c3"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","keyName":"e2e-rate-a-7252c3","selected_subscription":"e2e-rate-iso-a-7252c3","selected_subscription_key":"ai-tenant-e2e-shared-a-ace6c2/e2e-rate-iso-a-7252c3@ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7252c3","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35324","PortSpecifier":{"PortValue":35324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","method":"POST","path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35324","PortSpecifier":{"PortValue":35324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375226,"nanos":658073292},"http":{"id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EdK07igHplYWYsXF_BiFaCEXerpmL2lpcij9vGVA5tIU3oO2CWAe9goHFgw7"}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EdK07igHplYWYsXF_BiFaCEXerpmL2lpcij9vGVA5tIU3oO2CWAe9goHFgw7\"}"}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","keyName":"e2e-rate-a-7252c3","subscription":"e2e-rate-iso-a-7252c3","tenant":"e2e-shared-a-ace6c2","userId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\",\"requestedSubscription\":\"e2e-rate-iso-a-7252c3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7252c3","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7252c3"}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","keyName":"e2e-rate-a-7252c3","selected_subscription":"e2e-rate-iso-a-7252c3","selected_subscription_key":"ai-tenant-e2e-shared-a-ace6c2/e2e-rate-iso-a-7252c3@ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7252c3","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35338","PortSpecifier":{"PortValue":35338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","method":"POST","path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35338","PortSpecifier":{"PortValue":35338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375227,"nanos":693273605},"http":{"id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EdK07igHplYWYsXF_BiFaCEXerpmL2lpcij9vGVA5tIU3oO2CWAe9goHFgw7"}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EdK07igHplYWYsXF_BiFaCEXerpmL2lpcij9vGVA5tIU3oO2CWAe9goHFgw7\"}"}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","keyName":"e2e-rate-a-7252c3","subscription":"e2e-rate-iso-a-7252c3","tenant":"e2e-shared-a-ace6c2","userId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\",\"requestedSubscription\":\"e2e-rate-iso-a-7252c3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7252c3","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7252c3"}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","keyName":"e2e-rate-a-7252c3","selected_subscription":"e2e-rate-iso-a-7252c3","selected_subscription_key":"ai-tenant-e2e-shared-a-ace6c2/e2e-rate-iso-a-7252c3@ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7252c3","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:34930","PortSpecifier":{"PortValue":34930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:34930","PortSpecifier":{"PortValue":34930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375238,"nanos":456780560},"http":{"id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:59160","PortSpecifier":{"PortValue":59160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:59160","PortSpecifier":{"PortValue":59160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375238,"nanos":496266631},"http":{"id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","method":"POST","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/rate-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0694abf1-a3ce-434d-9182-558548e319cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:34938","PortSpecifier":{"PortValue":34938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0694abf1-a3ce-434d-9182-558548e319cd","method":"POST","path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0694abf1-a3ce-434d-9182-558548e319cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:34938","PortSpecifier":{"PortValue":34938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375238,"nanos":534711656},"http":{"id":"0694abf1-a3ce-434d-9182-558548e319cd","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T5Y4Le1s6Kkh2Svr_cCCJxWw1Gl6ttp013brxJHI6GBeC21lshmUEkwquouT"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T5Y4Le1s6Kkh2Svr_cCCJxWw1Gl6ttp013brxJHI6GBeC21lshmUEkwquouT\"}"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a5374c24-2c69-4536-9f74-0f085085664e","keyName":"e2e-rate-a-07802e","subscription":"e2e-rate-iso-a-07802e","tenant":"e2e-shared-a-ace6c2","userId":"a5374c24-2c69-4536-9f74-0f085085664e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\",\"requestedSubscription\":\"e2e-rate-iso-a-07802e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-07802e","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0694abf1-a3ce-434d-9182-558548e319cd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-07802e"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a5374c24-2c69-4536-9f74-0f085085664e","keyName":"e2e-rate-a-07802e","selected_subscription":"e2e-rate-iso-a-07802e","selected_subscription_key":"ai-tenant-e2e-shared-a-ace6c2/e2e-rate-iso-a-07802e@ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-07802e","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0694abf1-a3ce-434d-9182-558548e319cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0694abf1-a3ce-434d-9182-558548e319cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:36644","PortSpecifier":{"PortValue":36644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","method":"POST","path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:36644","PortSpecifier":{"PortValue":36644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375239,"nanos":578052245},"http":{"id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T5Y4Le1s6Kkh2Svr_cCCJxWw1Gl6ttp013brxJHI6GBeC21lshmUEkwquouT"}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T5Y4Le1s6Kkh2Svr_cCCJxWw1Gl6ttp013brxJHI6GBeC21lshmUEkwquouT\"}"}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a5374c24-2c69-4536-9f74-0f085085664e","keyName":"e2e-rate-a-07802e","subscription":"e2e-rate-iso-a-07802e","tenant":"e2e-shared-a-ace6c2","userId":"a5374c24-2c69-4536-9f74-0f085085664e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\",\"requestedSubscription\":\"e2e-rate-iso-a-07802e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-07802e","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-07802e"}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a5374c24-2c69-4536-9f74-0f085085664e","keyName":"e2e-rate-a-07802e","selected_subscription":"e2e-rate-iso-a-07802e","selected_subscription_key":"ai-tenant-e2e-shared-a-ace6c2/e2e-rate-iso-a-07802e@ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-07802e","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:36650","PortSpecifier":{"PortValue":36650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"808973c8-a44c-4ed2-aafb-d2788e125124","method":"POST","path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:36650","PortSpecifier":{"PortValue":36650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375240,"nanos":616252530},"http":{"id":"808973c8-a44c-4ed2-aafb-d2788e125124","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T5Y4Le1s6Kkh2Svr_cCCJxWw1Gl6ttp013brxJHI6GBeC21lshmUEkwquouT"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T5Y4Le1s6Kkh2Svr_cCCJxWw1Gl6ttp013brxJHI6GBeC21lshmUEkwquouT\"}"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a5374c24-2c69-4536-9f74-0f085085664e","keyName":"e2e-rate-a-07802e","subscription":"e2e-rate-iso-a-07802e","tenant":"e2e-shared-a-ace6c2","userId":"a5374c24-2c69-4536-9f74-0f085085664e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\",\"requestedSubscription\":\"e2e-rate-iso-a-07802e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-07802e","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-07802e"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a5374c24-2c69-4536-9f74-0f085085664e","keyName":"e2e-rate-a-07802e","selected_subscription":"e2e-rate-iso-a-07802e","selected_subscription_key":"ai-tenant-e2e-shared-a-ace6c2/e2e-rate-iso-a-07802e@ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-07802e","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:55506","PortSpecifier":{"PortValue":55506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c012bd3a-b6a4-4281-8122-a50999597bac","method":"POST","path":"/ai-tenant-e2e-shared-b-d392e3/rate-test-model-d392e3/v1/completions","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:55506","PortSpecifier":{"PortValue":55506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375240,"nanos":649412820},"http":{"id":"c012bd3a-b6a4-4281-8122-a50999597bac","method":"POST","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-d392e3/rate-test-model-d392e3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AlX3sf0nOgBd0Ey2_jzNmdBdPw47fAXnbV3kPiV0FGONF0hBjUnUYrCb4q27"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d392e3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AlX3sf0nOgBd0Ey2_jzNmdBdPw47fAXnbV3kPiV0FGONF0hBjUnUYrCb4q27\"}"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d392e3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"466accd6-6fc6-43d9-9320-f70321cdce2d","keyName":"e2e-rate-b-07802e","subscription":"e2e-rate-iso-b-07802e","tenant":"e2e-shared-b-d392e3","userId":"466accd6-6fc6-43d9-9320-f70321cdce2d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-d392e3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-d392e3/rate-test-model-d392e3\",\"requestedSubscription\":\"e2e-rate-iso-b-07802e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d392e3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d392e3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-07802e","namespace":"ai-tenant-e2e-shared-b-d392e3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/rate-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-07802e"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"466accd6-6fc6-43d9-9320-f70321cdce2d","keyName":"e2e-rate-b-07802e","selected_subscription":"e2e-rate-iso-b-07802e","selected_subscription_key":"ai-tenant-e2e-shared-b-d392e3/e2e-rate-iso-b-07802e@ai-tenant-e2e-shared-b-d392e3/rate-test-model-d392e3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d392e3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-07802e","namespace":"ai-tenant-e2e-shared-b-d392e3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"info","ts":"2026-07-06T22:01:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"}
{"level":"info","ts":"2026-07-06T22:01:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}