--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b72080e61815986feb64796067bca9c22bc886b02addac9abdd97a8b0cf3bb2"}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba3f4338cbeb5d20746fa931d2d4ecdb6ebc9c07fada4d557b86a7fe7c5716c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b72080e61815986feb64796067bca9c22bc886b02addac9abdd97a8b0cf3bb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b72080e61815986feb64796067bca9c22bc886b02addac9abdd97a8b0cf3bb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b72080e61815986feb64796067bca9c22bc886b02addac9abdd97a8b0cf3bb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b72080e61815986feb64796067bca9c22bc886b02addac9abdd97a8b0cf3bb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae6764f7e71476c591a69ba5612070996ec6a88ff865867a617d69acdc8f7c5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba3f4338cbeb5d20746fa931d2d4ecdb6ebc9c07fada4d557b86a7fe7c5716c"}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae6764f7e71476c591a69ba5612070996ec6a88ff865867a617d69acdc8f7c5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae6764f7e71476c591a69ba5612070996ec6a88ff865867a617d69acdc8f7c5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae6764f7e71476c591a69ba5612070996ec6a88ff865867a617d69acdc8f7c5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b72080e61815986feb64796067bca9c22bc886b02addac9abdd97a8b0cf3bb2"}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae6764f7e71476c591a69ba5612070996ec6a88ff865867a617d69acdc8f7c5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae6764f7e71476c591a69ba5612070996ec6a88ff865867a617d69acdc8f7c5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1adb16824dbb62aeb814ec7910f63dbf2a1651e28b0d36cc646be12c52989c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e"}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1adb16824dbb62aeb814ec7910f63dbf2a1651e28b0d36cc646be12c52989c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b87f9f1369a53a9e09e908ac0f64bc4bdce4d45f56f00423f801a788981d6d57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b87f9f1369a53a9e09e908ac0f64bc4bdce4d45f56f00423f801a788981d6d57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1adb16824dbb62aeb814ec7910f63dbf2a1651e28b0d36cc646be12c52989c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b87f9f1369a53a9e09e908ac0f64bc4bdce4d45f56f00423f801a788981d6d57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b87f9f1369a53a9e09e908ac0f64bc4bdce4d45f56f00423f801a788981d6d57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1adb16824dbb62aeb814ec7910f63dbf2a1651e28b0d36cc646be12c52989c71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae6764f7e71476c591a69ba5612070996ec6a88ff865867a617d69acdc8f7c5c"}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b87f9f1369a53a9e09e908ac0f64bc4bdce4d45f56f00423f801a788981d6d57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1adb16824dbb62aeb814ec7910f63dbf2a1651e28b0d36cc646be12c52989c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1adb16824dbb62aeb814ec7910f63dbf2a1651e28b0d36cc646be12c52989c71"}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1adb16824dbb62aeb814ec7910f63dbf2a1651e28b0d36cc646be12c52989c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae6764f7e71476c591a69ba5612070996ec6a88ff865867a617d69acdc8f7c5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae6764f7e71476c591a69ba5612070996ec6a88ff865867a617d69acdc8f7c5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b87f9f1369a53a9e09e908ac0f64bc4bdce4d45f56f00423f801a788981d6d57"}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae6764f7e71476c591a69ba5612070996ec6a88ff865867a617d69acdc8f7c5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1adb16824dbb62aeb814ec7910f63dbf2a1651e28b0d36cc646be12c52989c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b87f9f1369a53a9e09e908ac0f64bc4bdce4d45f56f00423f801a788981d6d57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b87f9f1369a53a9e09e908ac0f64bc4bdce4d45f56f00423f801a788981d6d57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b87f9f1369a53a9e09e908ac0f64bc4bdce4d45f56f00423f801a788981d6d57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae6764f7e71476c591a69ba5612070996ec6a88ff865867a617d69acdc8f7c5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b87f9f1369a53a9e09e908ac0f64bc4bdce4d45f56f00423f801a788981d6d57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1adb16824dbb62aeb814ec7910f63dbf2a1651e28b0d36cc646be12c52989c71"}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1adb16824dbb62aeb814ec7910f63dbf2a1651e28b0d36cc646be12c52989c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1adb16824dbb62aeb814ec7910f63dbf2a1651e28b0d36cc646be12c52989c71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae6764f7e71476c591a69ba5612070996ec6a88ff865867a617d69acdc8f7c5c"}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1adb16824dbb62aeb814ec7910f63dbf2a1651e28b0d36cc646be12c52989c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1adb16824dbb62aeb814ec7910f63dbf2a1651e28b0d36cc646be12c52989c71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b87f9f1369a53a9e09e908ac0f64bc4bdce4d45f56f00423f801a788981d6d57"}
{"level":"info","ts":"2026-07-14T20:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1adb16824dbb62aeb814ec7910f63dbf2a1651e28b0d36cc646be12c52989c71"}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd"}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd"}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd"}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5"}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a243bc3e8c2d0f151d1a74d8b8da5b89cc099a6132ea55b548da963cc337129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a243bc3e8c2d0f151d1a74d8b8da5b89cc099a6132ea55b548da963cc337129","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a243bc3e8c2d0f151d1a74d8b8da5b89cc099a6132ea55b548da963cc337129"}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba677cfd7ac0c33807c37973caa9fccbaf5728abcf06fe4505ecbf354552e016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba677cfd7ac0c33807c37973caa9fccbaf5728abcf06fe4505ecbf354552e016"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba677cfd7ac0c33807c37973caa9fccbaf5728abcf06fe4505ecbf354552e016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a243bc3e8c2d0f151d1a74d8b8da5b89cc099a6132ea55b548da963cc337129","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a243bc3e8c2d0f151d1a74d8b8da5b89cc099a6132ea55b548da963cc337129"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba677cfd7ac0c33807c37973caa9fccbaf5728abcf06fe4505ecbf354552e016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a243bc3e8c2d0f151d1a74d8b8da5b89cc099a6132ea55b548da963cc337129","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a243bc3e8c2d0f151d1a74d8b8da5b89cc099a6132ea55b548da963cc337129"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba677cfd7ac0c33807c37973caa9fccbaf5728abcf06fe4505ecbf354552e016"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a243bc3e8c2d0f151d1a74d8b8da5b89cc099a6132ea55b548da963cc337129","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba677cfd7ac0c33807c37973caa9fccbaf5728abcf06fe4505ecbf354552e016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba677cfd7ac0c33807c37973caa9fccbaf5728abcf06fe4505ecbf354552e016"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a243bc3e8c2d0f151d1a74d8b8da5b89cc099a6132ea55b548da963cc337129"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba677cfd7ac0c33807c37973caa9fccbaf5728abcf06fe4505ecbf354552e016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a243bc3e8c2d0f151d1a74d8b8da5b89cc099a6132ea55b548da963cc337129","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37dcd28cc075bdee3bbefd1d9c4a6406a998c8c1e4c20fc1c9f5b625b44633c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37dcd28cc075bdee3bbefd1d9c4a6406a998c8c1e4c20fc1c9f5b625b44633c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba677cfd7ac0c33807c37973caa9fccbaf5728abcf06fe4505ecbf354552e016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37dcd28cc075bdee3bbefd1d9c4a6406a998c8c1e4c20fc1c9f5b625b44633c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37dcd28cc075bdee3bbefd1d9c4a6406a998c8c1e4c20fc1c9f5b625b44633c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5"}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37dcd28cc075bdee3bbefd1d9c4a6406a998c8c1e4c20fc1c9f5b625b44633c8"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37dcd28cc075bdee3bbefd1d9c4a6406a998c8c1e4c20fc1c9f5b625b44633c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37dcd28cc075bdee3bbefd1d9c4a6406a998c8c1e4c20fc1c9f5b625b44633c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37dcd28cc075bdee3bbefd1d9c4a6406a998c8c1e4c20fc1c9f5b625b44633c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37dcd28cc075bdee3bbefd1d9c4a6406a998c8c1e4c20fc1c9f5b625b44633c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b17ef9f0ae4f00979583afdfb98dd70c2d0dad1509827ea4d5d0985d90bab3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba677cfd7ac0c33807c37973caa9fccbaf5728abcf06fe4505ecbf354552e016"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b17ef9f0ae4f00979583afdfb98dd70c2d0dad1509827ea4d5d0985d90bab3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b17ef9f0ae4f00979583afdfb98dd70c2d0dad1509827ea4d5d0985d90bab3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b17ef9f0ae4f00979583afdfb98dd70c2d0dad1509827ea4d5d0985d90bab3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5"}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b17ef9f0ae4f00979583afdfb98dd70c2d0dad1509827ea4d5d0985d90bab3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37dcd28cc075bdee3bbefd1d9c4a6406a998c8c1e4c20fc1c9f5b625b44633c8"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b17ef9f0ae4f00979583afdfb98dd70c2d0dad1509827ea4d5d0985d90bab3d"}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b17ef9f0ae4f00979583afdfb98dd70c2d0dad1509827ea4d5d0985d90bab3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b17ef9f0ae4f00979583afdfb98dd70c2d0dad1509827ea4d5d0985d90bab3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b17ef9f0ae4f00979583afdfb98dd70c2d0dad1509827ea4d5d0985d90bab3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a6ba37df3cbefb9cd0e83c0f9f0896460d5bc6b9f955772b1e81188a19ab437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a6ba37df3cbefb9cd0e83c0f9f0896460d5bc6b9f955772b1e81188a19ab437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b17ef9f0ae4f00979583afdfb98dd70c2d0dad1509827ea4d5d0985d90bab3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a6ba37df3cbefb9cd0e83c0f9f0896460d5bc6b9f955772b1e81188a19ab437"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a6ba37df3cbefb9cd0e83c0f9f0896460d5bc6b9f955772b1e81188a19ab437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a6ba37df3cbefb9cd0e83c0f9f0896460d5bc6b9f955772b1e81188a19ab437"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a6ba37df3cbefb9cd0e83c0f9f0896460d5bc6b9f955772b1e81188a19ab437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b17ef9f0ae4f00979583afdfb98dd70c2d0dad1509827ea4d5d0985d90bab3d"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a6ba37df3cbefb9cd0e83c0f9f0896460d5bc6b9f955772b1e81188a19ab437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a6ba37df3cbefb9cd0e83c0f9f0896460d5bc6b9f955772b1e81188a19ab437"}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33254cc1c08e1fef69008b93dee3bb1b540c8463132a3400593922fe2d933a9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33254cc1c08e1fef69008b93dee3bb1b540c8463132a3400593922fe2d933a9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8"}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33254cc1c08e1fef69008b93dee3bb1b540c8463132a3400593922fe2d933a9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33254cc1c08e1fef69008b93dee3bb1b540c8463132a3400593922fe2d933a9b"}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33254cc1c08e1fef69008b93dee3bb1b540c8463132a3400593922fe2d933a9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33254cc1c08e1fef69008b93dee3bb1b540c8463132a3400593922fe2d933a9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33254cc1c08e1fef69008b93dee3bb1b540c8463132a3400593922fe2d933a9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d"}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33254cc1c08e1fef69008b93dee3bb1b540c8463132a3400593922fe2d933a9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:33:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:33:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33254cc1c08e1fef69008b93dee3bb1b540c8463132a3400593922fe2d933a9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8"}
{"level":"debug","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:33:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:33:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33254cc1c08e1fef69008b93dee3bb1b540c8463132a3400593922fe2d933a9b"}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d"}
{"level":"info","ts":"2026-07-14T20:33:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8"}
{"level":"info","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c21a0627-b4aa-4748-87bc-ffb49175a7f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53548","PortSpecifier":{"PortValue":53548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c21a0627-b4aa-4748-87bc-ffb49175a7f0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c21a0627-b4aa-4748-87bc-ffb49175a7f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53548","PortSpecifier":{"PortValue":53548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061230,"nanos":456135829},"http":{"id":"c21a0627-b4aa-4748-87bc-ffb49175a7f0","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c21a0627-b4aa-4748-87bc-ffb49175a7f0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c21a0627-b4aa-4748-87bc-ffb49175a7f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c21a0627-b4aa-4748-87bc-ffb49175a7f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c21a0627-b4aa-4748-87bc-ffb49175a7f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c21a0627-b4aa-4748-87bc-ffb49175a7f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c21a0627-b4aa-4748-87bc-ffb49175a7f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/auth-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c21a0627-b4aa-4748-87bc-ffb49175a7f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c21a0627-b4aa-4748-87bc-ffb49175a7f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c21a0627-b4aa-4748-87bc-ffb49175a7f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c21a0627-b4aa-4748-87bc-ffb49175a7f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c21a0627-b4aa-4748-87bc-ffb49175a7f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70fff57a-6489-44eb-9b5e-c9d09375d665","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34484","PortSpecifier":{"PortValue":34484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70fff57a-6489-44eb-9b5e-c9d09375d665","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70fff57a-6489-44eb-9b5e-c9d09375d665","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34484","PortSpecifier":{"PortValue":34484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061230,"nanos":515545056},"http":{"id":"70fff57a-6489-44eb-9b5e-c9d09375d665","method":"POST","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70fff57a-6489-44eb-9b5e-c9d09375d665","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70fff57a-6489-44eb-9b5e-c9d09375d665","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70fff57a-6489-44eb-9b5e-c9d09375d665","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70fff57a-6489-44eb-9b5e-c9d09375d665","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70fff57a-6489-44eb-9b5e-c9d09375d665","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70fff57a-6489-44eb-9b5e-c9d09375d665","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4143c/auth-test-model-d4143c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4143c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70fff57a-6489-44eb-9b5e-c9d09375d665","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70fff57a-6489-44eb-9b5e-c9d09375d665","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70fff57a-6489-44eb-9b5e-c9d09375d665","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70fff57a-6489-44eb-9b5e-c9d09375d665","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70fff57a-6489-44eb-9b5e-c9d09375d665","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbece864-750e-4586-9e28-29c1c628091c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53552","PortSpecifier":{"PortValue":53552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bbece864-750e-4586-9e28-29c1c628091c","method":"GET","path":"/maas-api/v1/api-keys/02967239-cd13-450b-82ec-e4cd8ce79aef","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbece864-750e-4586-9e28-29c1c628091c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53552","PortSpecifier":{"PortValue":53552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061230,"nanos":571071675},"http":{"id":"bbece864-750e-4586-9e28-29c1c628091c","method":"GET","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/02967239-cd13-450b-82ec-e4cd8ce79aef",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bbece864-750e-4586-9e28-29c1c628091c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bbece864-750e-4586-9e28-29c1c628091c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bbece864-750e-4586-9e28-29c1c628091c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/02967239-cd13-450b-82ec-e4cd8ce79aef",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbece864-750e-4586-9e28-29c1c628091c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbece864-750e-4586-9e28-29c1c628091c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbece864-750e-4586-9e28-29c1c628091c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/auth-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bbece864-750e-4586-9e28-29c1c628091c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbece864-750e-4586-9e28-29c1c628091c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbece864-750e-4586-9e28-29c1c628091c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbece864-750e-4586-9e28-29c1c628091c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbece864-750e-4586-9e28-29c1c628091c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f00ea038-5747-4409-8fbd-1336731557f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34488","PortSpecifier":{"PortValue":34488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f00ea038-5747-4409-8fbd-1336731557f6","method":"GET","path":"/maas-api/v1/api-keys/e8984222-f41a-4f7e-8c49-e7f125a51775","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f00ea038-5747-4409-8fbd-1336731557f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34488","PortSpecifier":{"PortValue":34488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061230,"nanos":606637243},"http":{"id":"f00ea038-5747-4409-8fbd-1336731557f6","method":"GET","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e8984222-f41a-4f7e-8c49-e7f125a51775",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f00ea038-5747-4409-8fbd-1336731557f6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f00ea038-5747-4409-8fbd-1336731557f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f00ea038-5747-4409-8fbd-1336731557f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e8984222-f41a-4f7e-8c49-e7f125a51775",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f00ea038-5747-4409-8fbd-1336731557f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f00ea038-5747-4409-8fbd-1336731557f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f00ea038-5747-4409-8fbd-1336731557f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4143c/auth-test-model-d4143c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4143c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f00ea038-5747-4409-8fbd-1336731557f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f00ea038-5747-4409-8fbd-1336731557f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f00ea038-5747-4409-8fbd-1336731557f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f00ea038-5747-4409-8fbd-1336731557f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f00ea038-5747-4409-8fbd-1336731557f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4127d1a7-94c8-4eda-b1ad-70034046340e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42966","PortSpecifier":{"PortValue":42966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4127d1a7-94c8-4eda-b1ad-70034046340e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4127d1a7-94c8-4eda-b1ad-70034046340e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42966","PortSpecifier":{"PortValue":42966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061247,"nanos":881419675},"http":{"id":"4127d1a7-94c8-4eda-b1ad-70034046340e","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4127d1a7-94c8-4eda-b1ad-70034046340e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4127d1a7-94c8-4eda-b1ad-70034046340e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4127d1a7-94c8-4eda-b1ad-70034046340e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4127d1a7-94c8-4eda-b1ad-70034046340e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4127d1a7-94c8-4eda-b1ad-70034046340e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4127d1a7-94c8-4eda-b1ad-70034046340e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/auth-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4127d1a7-94c8-4eda-b1ad-70034046340e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4127d1a7-94c8-4eda-b1ad-70034046340e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4127d1a7-94c8-4eda-b1ad-70034046340e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4127d1a7-94c8-4eda-b1ad-70034046340e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4127d1a7-94c8-4eda-b1ad-70034046340e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf164185-01e6-4455-832d-e3d102e0b754","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55954","PortSpecifier":{"PortValue":55954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf164185-01e6-4455-832d-e3d102e0b754","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf164185-01e6-4455-832d-e3d102e0b754","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55954","PortSpecifier":{"PortValue":55954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061247,"nanos":924216395},"http":{"id":"cf164185-01e6-4455-832d-e3d102e0b754","method":"POST","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf164185-01e6-4455-832d-e3d102e0b754","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf164185-01e6-4455-832d-e3d102e0b754","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf164185-01e6-4455-832d-e3d102e0b754","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf164185-01e6-4455-832d-e3d102e0b754","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf164185-01e6-4455-832d-e3d102e0b754","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf164185-01e6-4455-832d-e3d102e0b754","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4143c/auth-test-model-d4143c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4143c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf164185-01e6-4455-832d-e3d102e0b754","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf164185-01e6-4455-832d-e3d102e0b754","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf164185-01e6-4455-832d-e3d102e0b754","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf164185-01e6-4455-832d-e3d102e0b754","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf164185-01e6-4455-832d-e3d102e0b754","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42974","PortSpecifier":{"PortValue":42974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42974","PortSpecifier":{"PortValue":42974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061247,"nanos":976374323},"http":{"id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","method":"GET","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WqR1TBsIcnJUJgDV_PqrzuPCPliEXMclxA7TatCD2YLB8mQVhGfF2Wwbh8kg"}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WqR1TBsIcnJUJgDV_PqrzuPCPliEXMclxA7TatCD2YLB8mQVhGfF2Wwbh8kg\"}"}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"804cb34a-680d-4297-aa01-1dc80a56692c","keyName":"e2e-auth-iso-a-a24ccc","subscription":"e2e-auth-iso-9f45a8","tenant":"e2e-shared-a-e55cd3","userId":"804cb34a-680d-4297-aa01-1dc80a56692c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/auth-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-9f45a8"}
{"level":"info","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:34:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0ddf082-47ed-4b35-9473-5ab7ad65178e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ef140ac-fa9a-4cef-af4a-778f19859096","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40500","PortSpecifier":{"PortValue":40500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ef140ac-fa9a-4cef-af4a-778f19859096","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ef140ac-fa9a-4cef-af4a-778f19859096","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40500","PortSpecifier":{"PortValue":40500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061267,"nanos":480226012},"http":{"id":"8ef140ac-fa9a-4cef-af4a-778f19859096","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ef140ac-fa9a-4cef-af4a-778f19859096","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ef140ac-fa9a-4cef-af4a-778f19859096","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ef140ac-fa9a-4cef-af4a-778f19859096","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ef140ac-fa9a-4cef-af4a-778f19859096","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ef140ac-fa9a-4cef-af4a-778f19859096","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ef140ac-fa9a-4cef-af4a-778f19859096","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/auth-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ef140ac-fa9a-4cef-af4a-778f19859096","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ef140ac-fa9a-4cef-af4a-778f19859096","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ef140ac-fa9a-4cef-af4a-778f19859096","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ef140ac-fa9a-4cef-af4a-778f19859096","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ef140ac-fa9a-4cef-af4a-778f19859096","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5963a6bd-a063-47f9-9866-2e4aeec35da7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47494","PortSpecifier":{"PortValue":47494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5963a6bd-a063-47f9-9866-2e4aeec35da7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5963a6bd-a063-47f9-9866-2e4aeec35da7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47494","PortSpecifier":{"PortValue":47494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061267,"nanos":517415980},"http":{"id":"5963a6bd-a063-47f9-9866-2e4aeec35da7","method":"POST","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5963a6bd-a063-47f9-9866-2e4aeec35da7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5963a6bd-a063-47f9-9866-2e4aeec35da7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5963a6bd-a063-47f9-9866-2e4aeec35da7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5963a6bd-a063-47f9-9866-2e4aeec35da7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5963a6bd-a063-47f9-9866-2e4aeec35da7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5963a6bd-a063-47f9-9866-2e4aeec35da7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4143c/auth-test-model-d4143c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4143c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5963a6bd-a063-47f9-9866-2e4aeec35da7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5963a6bd-a063-47f9-9866-2e4aeec35da7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5963a6bd-a063-47f9-9866-2e4aeec35da7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5963a6bd-a063-47f9-9866-2e4aeec35da7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5963a6bd-a063-47f9-9866-2e4aeec35da7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84a5c85c-3117-4a6d-8dcd-909f667dcd16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47510","PortSpecifier":{"PortValue":47510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84a5c85c-3117-4a6d-8dcd-909f667dcd16","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84a5c85c-3117-4a6d-8dcd-909f667dcd16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47510","PortSpecifier":{"PortValue":47510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061267,"nanos":552850767},"http":{"id":"84a5c85c-3117-4a6d-8dcd-909f667dcd16","method":"GET","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84a5c85c-3117-4a6d-8dcd-909f667dcd16","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bAgxZ11v1tKTasFl_1me0YEp7mklJj9uHwkvPSxRUGCJ7JHflREQG0e8mob7"}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"84a5c85c-3117-4a6d-8dcd-909f667dcd16","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d4143c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bAgxZ11v1tKTasFl_1me0YEp7mklJj9uHwkvPSxRUGCJ7JHflREQG0e8mob7\"}"}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"84a5c85c-3117-4a6d-8dcd-909f667dcd16","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d4143c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84a5c85c-3117-4a6d-8dcd-909f667dcd16","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84a5c85c-3117-4a6d-8dcd-909f667dcd16","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"84a5c85c-3117-4a6d-8dcd-909f667dcd16","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84a5c85c-3117-4a6d-8dcd-909f667dcd16","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-14T20:34:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84a5c85c-3117-4a6d-8dcd-909f667dcd16","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3ef217b-f6c2-4ae8-8fc1-c3f2b323e34e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:36404","PortSpecifier":{"PortValue":36404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3ef217b-f6c2-4ae8-8fc1-c3f2b323e34e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3ef217b-f6c2-4ae8-8fc1-c3f2b323e34e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:36404","PortSpecifier":{"PortValue":36404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061284,"nanos":843390069},"http":{"id":"e3ef217b-f6c2-4ae8-8fc1-c3f2b323e34e","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3ef217b-f6c2-4ae8-8fc1-c3f2b323e34e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3ef217b-f6c2-4ae8-8fc1-c3f2b323e34e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3ef217b-f6c2-4ae8-8fc1-c3f2b323e34e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3ef217b-f6c2-4ae8-8fc1-c3f2b323e34e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3ef217b-f6c2-4ae8-8fc1-c3f2b323e34e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3ef217b-f6c2-4ae8-8fc1-c3f2b323e34e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/auth-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3ef217b-f6c2-4ae8-8fc1-c3f2b323e34e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3ef217b-f6c2-4ae8-8fc1-c3f2b323e34e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3ef217b-f6c2-4ae8-8fc1-c3f2b323e34e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3ef217b-f6c2-4ae8-8fc1-c3f2b323e34e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3ef217b-f6c2-4ae8-8fc1-c3f2b323e34e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a59c06b-bbcb-4b6c-8228-ac59b1645b08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51948","PortSpecifier":{"PortValue":51948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a59c06b-bbcb-4b6c-8228-ac59b1645b08","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a59c06b-bbcb-4b6c-8228-ac59b1645b08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51948","PortSpecifier":{"PortValue":51948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061284,"nanos":879956030},"http":{"id":"9a59c06b-bbcb-4b6c-8228-ac59b1645b08","method":"POST","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a59c06b-bbcb-4b6c-8228-ac59b1645b08","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a59c06b-bbcb-4b6c-8228-ac59b1645b08","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a59c06b-bbcb-4b6c-8228-ac59b1645b08","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a59c06b-bbcb-4b6c-8228-ac59b1645b08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a59c06b-bbcb-4b6c-8228-ac59b1645b08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a59c06b-bbcb-4b6c-8228-ac59b1645b08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4143c/auth-test-model-d4143c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4143c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a59c06b-bbcb-4b6c-8228-ac59b1645b08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a59c06b-bbcb-4b6c-8228-ac59b1645b08","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a59c06b-bbcb-4b6c-8228-ac59b1645b08","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a59c06b-bbcb-4b6c-8228-ac59b1645b08","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a59c06b-bbcb-4b6c-8228-ac59b1645b08","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eed6a250-5b46-46b9-a873-66aff76530db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:36408","PortSpecifier":{"PortValue":36408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eed6a250-5b46-46b9-a873-66aff76530db","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eed6a250-5b46-46b9-a873-66aff76530db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:36408","PortSpecifier":{"PortValue":36408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061284,"nanos":915592326},"http":{"id":"eed6a250-5b46-46b9-a873-66aff76530db","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eed6a250-5b46-46b9-a873-66aff76530db","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eed6a250-5b46-46b9-a873-66aff76530db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eed6a250-5b46-46b9-a873-66aff76530db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eed6a250-5b46-46b9-a873-66aff76530db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eed6a250-5b46-46b9-a873-66aff76530db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eed6a250-5b46-46b9-a873-66aff76530db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/auth-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eed6a250-5b46-46b9-a873-66aff76530db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eed6a250-5b46-46b9-a873-66aff76530db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eed6a250-5b46-46b9-a873-66aff76530db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eed6a250-5b46-46b9-a873-66aff76530db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eed6a250-5b46-46b9-a873-66aff76530db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b87dea65-616e-4bb3-878f-3ba936c6874a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51954","PortSpecifier":{"PortValue":51954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b87dea65-616e-4bb3-878f-3ba936c6874a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b87dea65-616e-4bb3-878f-3ba936c6874a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51954","PortSpecifier":{"PortValue":51954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061284,"nanos":951508067},"http":{"id":"b87dea65-616e-4bb3-878f-3ba936c6874a","method":"POST","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b87dea65-616e-4bb3-878f-3ba936c6874a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b87dea65-616e-4bb3-878f-3ba936c6874a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b87dea65-616e-4bb3-878f-3ba936c6874a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b87dea65-616e-4bb3-878f-3ba936c6874a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b87dea65-616e-4bb3-878f-3ba936c6874a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b87dea65-616e-4bb3-878f-3ba936c6874a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4143c/auth-test-model-d4143c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4143c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b87dea65-616e-4bb3-878f-3ba936c6874a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b87dea65-616e-4bb3-878f-3ba936c6874a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b87dea65-616e-4bb3-878f-3ba936c6874a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b87dea65-616e-4bb3-878f-3ba936c6874a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:34:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b87dea65-616e-4bb3-878f-3ba936c6874a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6959121-3036-4d4d-b39d-719e370d3c4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46414","PortSpecifier":{"PortValue":46414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6959121-3036-4d4d-b39d-719e370d3c4a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6959121-3036-4d4d-b39d-719e370d3c4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46414","PortSpecifier":{"PortValue":46414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061300,"nanos":121415478},"http":{"id":"b6959121-3036-4d4d-b39d-719e370d3c4a","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b6959121-3036-4d4d-b39d-719e370d3c4a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6959121-3036-4d4d-b39d-719e370d3c4a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6959121-3036-4d4d-b39d-719e370d3c4a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6959121-3036-4d4d-b39d-719e370d3c4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6959121-3036-4d4d-b39d-719e370d3c4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6959121-3036-4d4d-b39d-719e370d3c4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/auth-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b6959121-3036-4d4d-b39d-719e370d3c4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6959121-3036-4d4d-b39d-719e370d3c4a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6959121-3036-4d4d-b39d-719e370d3c4a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6959121-3036-4d4d-b39d-719e370d3c4a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6959121-3036-4d4d-b39d-719e370d3c4a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9bf71d6-7c34-4a41-8585-698c1378e404","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38146","PortSpecifier":{"PortValue":38146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9bf71d6-7c34-4a41-8585-698c1378e404","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9bf71d6-7c34-4a41-8585-698c1378e404","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38146","PortSpecifier":{"PortValue":38146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061300,"nanos":159711161},"http":{"id":"a9bf71d6-7c34-4a41-8585-698c1378e404","method":"POST","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a9bf71d6-7c34-4a41-8585-698c1378e404","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9bf71d6-7c34-4a41-8585-698c1378e404","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9bf71d6-7c34-4a41-8585-698c1378e404","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9bf71d6-7c34-4a41-8585-698c1378e404","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9bf71d6-7c34-4a41-8585-698c1378e404","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9bf71d6-7c34-4a41-8585-698c1378e404","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4143c/auth-test-model-d4143c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4143c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9bf71d6-7c34-4a41-8585-698c1378e404","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9bf71d6-7c34-4a41-8585-698c1378e404","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9bf71d6-7c34-4a41-8585-698c1378e404","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9bf71d6-7c34-4a41-8585-698c1378e404","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9bf71d6-7c34-4a41-8585-698c1378e404","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e24df35-b7f0-4fdc-9ac6-0219a5158ada","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38150","PortSpecifier":{"PortValue":38150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e24df35-b7f0-4fdc-9ac6-0219a5158ada","method":"GET","path":"/maas-api/v1/api-keys/5d996d32-2d69-491b-a9bd-2a7056627a2f","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e24df35-b7f0-4fdc-9ac6-0219a5158ada","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38150","PortSpecifier":{"PortValue":38150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061300,"nanos":204001073},"http":{"id":"7e24df35-b7f0-4fdc-9ac6-0219a5158ada","method":"GET","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5d996d32-2d69-491b-a9bd-2a7056627a2f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e24df35-b7f0-4fdc-9ac6-0219a5158ada","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e24df35-b7f0-4fdc-9ac6-0219a5158ada","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e24df35-b7f0-4fdc-9ac6-0219a5158ada","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5d996d32-2d69-491b-a9bd-2a7056627a2f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e24df35-b7f0-4fdc-9ac6-0219a5158ada","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e24df35-b7f0-4fdc-9ac6-0219a5158ada","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e24df35-b7f0-4fdc-9ac6-0219a5158ada","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4143c/auth-test-model-d4143c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4143c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e24df35-b7f0-4fdc-9ac6-0219a5158ada","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e24df35-b7f0-4fdc-9ac6-0219a5158ada","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e24df35-b7f0-4fdc-9ac6-0219a5158ada","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e24df35-b7f0-4fdc-9ac6-0219a5158ada","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e24df35-b7f0-4fdc-9ac6-0219a5158ada","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3085bde-7f40-4d27-bdf0-8f712fd227df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46416","PortSpecifier":{"PortValue":46416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3085bde-7f40-4d27-bdf0-8f712fd227df","method":"GET","path":"/maas-api/v1/api-keys/5d996d32-2d69-491b-a9bd-2a7056627a2f","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3085bde-7f40-4d27-bdf0-8f712fd227df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46416","PortSpecifier":{"PortValue":46416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061300,"nanos":238456470},"http":{"id":"a3085bde-7f40-4d27-bdf0-8f712fd227df","method":"GET","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5d996d32-2d69-491b-a9bd-2a7056627a2f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a3085bde-7f40-4d27-bdf0-8f712fd227df","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3085bde-7f40-4d27-bdf0-8f712fd227df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3085bde-7f40-4d27-bdf0-8f712fd227df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5d996d32-2d69-491b-a9bd-2a7056627a2f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3085bde-7f40-4d27-bdf0-8f712fd227df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3085bde-7f40-4d27-bdf0-8f712fd227df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3085bde-7f40-4d27-bdf0-8f712fd227df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/auth-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3085bde-7f40-4d27-bdf0-8f712fd227df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3085bde-7f40-4d27-bdf0-8f712fd227df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3085bde-7f40-4d27-bdf0-8f712fd227df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3085bde-7f40-4d27-bdf0-8f712fd227df","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3085bde-7f40-4d27-bdf0-8f712fd227df","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4fc735e-5b1b-4223-a569-1f07987d7347","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56470","PortSpecifier":{"PortValue":56470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4fc735e-5b1b-4223-a569-1f07987d7347","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4fc735e-5b1b-4223-a569-1f07987d7347","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56470","PortSpecifier":{"PortValue":56470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061323,"nanos":924642664},"http":{"id":"f4fc735e-5b1b-4223-a569-1f07987d7347","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4fc735e-5b1b-4223-a569-1f07987d7347","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4fc735e-5b1b-4223-a569-1f07987d7347","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4fc735e-5b1b-4223-a569-1f07987d7347","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4fc735e-5b1b-4223-a569-1f07987d7347","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4fc735e-5b1b-4223-a569-1f07987d7347","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4fc735e-5b1b-4223-a569-1f07987d7347","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/auth-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4fc735e-5b1b-4223-a569-1f07987d7347","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4fc735e-5b1b-4223-a569-1f07987d7347","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4fc735e-5b1b-4223-a569-1f07987d7347","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4fc735e-5b1b-4223-a569-1f07987d7347","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4fc735e-5b1b-4223-a569-1f07987d7347","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a680eddd-8ec1-4eb6-a109-9f20abcdfa16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56170","PortSpecifier":{"PortValue":56170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a680eddd-8ec1-4eb6-a109-9f20abcdfa16","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a680eddd-8ec1-4eb6-a109-9f20abcdfa16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56170","PortSpecifier":{"PortValue":56170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061323,"nanos":963186279},"http":{"id":"a680eddd-8ec1-4eb6-a109-9f20abcdfa16","method":"POST","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a680eddd-8ec1-4eb6-a109-9f20abcdfa16","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a680eddd-8ec1-4eb6-a109-9f20abcdfa16","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a680eddd-8ec1-4eb6-a109-9f20abcdfa16","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a680eddd-8ec1-4eb6-a109-9f20abcdfa16","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a680eddd-8ec1-4eb6-a109-9f20abcdfa16","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a680eddd-8ec1-4eb6-a109-9f20abcdfa16","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4143c/auth-test-model-d4143c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4143c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a680eddd-8ec1-4eb6-a109-9f20abcdfa16","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a680eddd-8ec1-4eb6-a109-9f20abcdfa16","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a680eddd-8ec1-4eb6-a109-9f20abcdfa16","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a680eddd-8ec1-4eb6-a109-9f20abcdfa16","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a680eddd-8ec1-4eb6-a109-9f20abcdfa16","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56476","PortSpecifier":{"PortValue":56476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56476","PortSpecifier":{"PortValue":56476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061324,"nanos":1188128},"http":{"id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:35:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QZ8BQAZgd8aPU65F_DhwtnftNUN9bY3rxs4nJ914jjyXrUbOKm2rdbRJR2LH"}
{"level":"debug","ts":"2026-07-14T20:35:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QZ8BQAZgd8aPU65F_DhwtnftNUN9bY3rxs4nJ914jjyXrUbOKm2rdbRJR2LH\"}"}
{"level":"debug","ts":"2026-07-14T20:35:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c2591bff-e76f-4a1e-8ada-728a1644c109","keyName":"e2e-auth-iso-a-0abea5","subscription":"e2e-auth-iso-d42ab9","tenant":"e2e-shared-a-e55cd3","userId":"c2591bff-e76f-4a1e-8ada-728a1644c109","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/auth-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d42ab9"}
{"level":"debug","ts":"2026-07-14T20:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T20:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9f20394-cc0a-43a8-ad5d-7b7c340dab37","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4e0802fe1cfffcc68996b3fc4d47621db2c00b1928af6ba2763a9ed60382cb8"}
{"level":"info","ts":"2026-07-14T20:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/125536e677c09cb41b6bfdfee8494bec459767de67e450560329f82d18373d34"}
{"level":"info","ts":"2026-07-14T20:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/debfd742815285aa96ebbc04fcaa9dc585ed36a931beb55969c3841dbdb4404c"}
{"level":"info","ts":"2026-07-14T20:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae6764f7e71476c591a69ba5612070996ec6a88ff865867a617d69acdc8f7c5c"}
{"level":"info","ts":"2026-07-14T20:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1adb16824dbb62aeb814ec7910f63dbf2a1651e28b0d36cc646be12c52989c71"}
{"level":"info","ts":"2026-07-14T20:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b72080e61815986feb64796067bca9c22bc886b02addac9abdd97a8b0cf3bb2"}
{"level":"info","ts":"2026-07-14T20:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad3969c83d0974eaeef91f6319ee527f7ea44fae685098d2ebbf8d212fbb1971"}
{"level":"info","ts":"2026-07-14T20:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b87f9f1369a53a9e09e908ac0f64bc4bdce4d45f56f00423f801a788981d6d57"}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c"}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c"}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c"}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c"}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c"}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"}
{"level":"error","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"def37c532773eeaebca65fe0fe26edf34eee8453b02f53a221cbdd45926e30a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"def37c532773eeaebca65fe0fe26edf34eee8453b02f53a221cbdd45926e30a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"def37c532773eeaebca65fe0fe26edf34eee8453b02f53a221cbdd45926e30a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/def37c532773eeaebca65fe0fe26edf34eee8453b02f53a221cbdd45926e30a7"}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"def37c532773eeaebca65fe0fe26edf34eee8453b02f53a221cbdd45926e30a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/def37c532773eeaebca65fe0fe26edf34eee8453b02f53a221cbdd45926e30a7"}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"def37c532773eeaebca65fe0fe26edf34eee8453b02f53a221cbdd45926e30a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/def37c532773eeaebca65fe0fe26edf34eee8453b02f53a221cbdd45926e30a7"}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"def37c532773eeaebca65fe0fe26edf34eee8453b02f53a221cbdd45926e30a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["def37c532773eeaebca65fe0fe26edf34eee8453b02f53a221cbdd45926e30a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"def37c532773eeaebca65fe0fe26edf34eee8453b02f53a221cbdd45926e30a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"}
{"level":"info","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b068c538b23eed1c3f70de9e34ddec278b05be96ae674bda91bf6849be4977d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b068c538b23eed1c3f70de9e34ddec278b05be96ae674bda91bf6849be4977d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"def37c532773eeaebca65fe0fe26edf34eee8453b02f53a221cbdd45926e30a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b068c538b23eed1c3f70de9e34ddec278b05be96ae674bda91bf6849be4977d2"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b068c538b23eed1c3f70de9e34ddec278b05be96ae674bda91bf6849be4977d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b068c538b23eed1c3f70de9e34ddec278b05be96ae674bda91bf6849be4977d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b068c538b23eed1c3f70de9e34ddec278b05be96ae674bda91bf6849be4977d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/def37c532773eeaebca65fe0fe26edf34eee8453b02f53a221cbdd45926e30a7"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b068c538b23eed1c3f70de9e34ddec278b05be96ae674bda91bf6849be4977d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b068c538b23eed1c3f70de9e34ddec278b05be96ae674bda91bf6849be4977d2"}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33254cc1c08e1fef69008b93dee3bb1b540c8463132a3400593922fe2d933a9b"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8"}
{"level":"error","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a6ba37df3cbefb9cd0e83c0f9f0896460d5bc6b9f955772b1e81188a19ab437"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da"}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:35:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab9eb971d6a01cb05571050446369ddc40249e75e58fcffd564ac0d213fe5a4d"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37dcd28cc075bdee3bbefd1d9c4a6406a998c8c1e4c20fc1c9f5b625b44633c8"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b17ef9f0ae4f00979583afdfb98dd70c2d0dad1509827ea4d5d0985d90bab3d"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a243bc3e8c2d0f151d1a74d8b8da5b89cc099a6132ea55b548da963cc337129"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bb34d36c42c3626642736cfaa2f9b01aed5fe261423afbef490cbe750c032c8"}
{"level":"info","ts":"2026-07-14T20:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/528291bd011582c47d36b2626e59c99f8bd8feea45e7fd847e0a95169c0cb9b5"}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ff18bb014e934b6306dd7159ab9b729860b83d7a695ce26c257d751890d359","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ff18bb014e934b6306dd7159ab9b729860b83d7a695ce26c257d751890d359","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ff18bb014e934b6306dd7159ab9b729860b83d7a695ce26c257d751890d359"}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ff18bb014e934b6306dd7159ab9b729860b83d7a695ce26c257d751890d359","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ff18bb014e934b6306dd7159ab9b729860b83d7a695ce26c257d751890d359"}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ff18bb014e934b6306dd7159ab9b729860b83d7a695ce26c257d751890d359","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ff18bb014e934b6306dd7159ab9b729860b83d7a695ce26c257d751890d359","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ff18bb014e934b6306dd7159ab9b729860b83d7a695ce26c257d751890d359"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ff18bb014e934b6306dd7159ab9b729860b83d7a695ce26c257d751890d359","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ff18bb014e934b6306dd7159ab9b729860b83d7a695ce26c257d751890d359"}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ff18bb014e934b6306dd7159ab9b729860b83d7a695ce26c257d751890d359","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ff18bb014e934b6306dd7159ab9b729860b83d7a695ce26c257d751890d359"}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"error","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe5f66402c2d1d245381dda318aa43fd71df713d2d8db902d1813a48a832a9f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe5f66402c2d1d245381dda318aa43fd71df713d2d8db902d1813a48a832a9f7"}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe5f66402c2d1d245381dda318aa43fd71df713d2d8db902d1813a48a832a9f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"info","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe5f66402c2d1d245381dda318aa43fd71df713d2d8db902d1813a48a832a9f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe5f66402c2d1d245381dda318aa43fd71df713d2d8db902d1813a48a832a9f7"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe5f66402c2d1d245381dda318aa43fd71df713d2d8db902d1813a48a832a9f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe5f66402c2d1d245381dda318aa43fd71df713d2d8db902d1813a48a832a9f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe5f66402c2d1d245381dda318aa43fd71df713d2d8db902d1813a48a832a9f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe5f66402c2d1d245381dda318aa43fd71df713d2d8db902d1813a48a832a9f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a88a98c1b0cf2e0582b4cea688b35cbf2cca09c1c57b7f5e2bcceb1c5094b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a88a98c1b0cf2e0582b4cea688b35cbf2cca09c1c57b7f5e2bcceb1c5094b4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe5f66402c2d1d245381dda318aa43fd71df713d2d8db902d1813a48a832a9f7"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a88a98c1b0cf2e0582b4cea688b35cbf2cca09c1c57b7f5e2bcceb1c5094b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a88a98c1b0cf2e0582b4cea688b35cbf2cca09c1c57b7f5e2bcceb1c5094b4c"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a88a98c1b0cf2e0582b4cea688b35cbf2cca09c1c57b7f5e2bcceb1c5094b4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a88a98c1b0cf2e0582b4cea688b35cbf2cca09c1c57b7f5e2bcceb1c5094b4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a88a98c1b0cf2e0582b4cea688b35cbf2cca09c1c57b7f5e2bcceb1c5094b4c"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a88a98c1b0cf2e0582b4cea688b35cbf2cca09c1c57b7f5e2bcceb1c5094b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a88a98c1b0cf2e0582b4cea688b35cbf2cca09c1c57b7f5e2bcceb1c5094b4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a88a98c1b0cf2e0582b4cea688b35cbf2cca09c1c57b7f5e2bcceb1c5094b4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a88a98c1b0cf2e0582b4cea688b35cbf2cca09c1c57b7f5e2bcceb1c5094b4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a88a98c1b0cf2e0582b4cea688b35cbf2cca09c1c57b7f5e2bcceb1c5094b4c"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"856ba1e83b9da15f72c6a4c047beac7ba271301a4766789591fbc3a3c1b0fe19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/856ba1e83b9da15f72c6a4c047beac7ba271301a4766789591fbc3a3c1b0fe19"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"856ba1e83b9da15f72c6a4c047beac7ba271301a4766789591fbc3a3c1b0fe19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"856ba1e83b9da15f72c6a4c047beac7ba271301a4766789591fbc3a3c1b0fe19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["856ba1e83b9da15f72c6a4c047beac7ba271301a4766789591fbc3a3c1b0fe19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"856ba1e83b9da15f72c6a4c047beac7ba271301a4766789591fbc3a3c1b0fe19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/856ba1e83b9da15f72c6a4c047beac7ba271301a4766789591fbc3a3c1b0fe19"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"856ba1e83b9da15f72c6a4c047beac7ba271301a4766789591fbc3a3c1b0fe19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2"}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/856ba1e83b9da15f72c6a4c047beac7ba271301a4766789591fbc3a3c1b0fe19"}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2"}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"debug","ts":"2026-07-14T20:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"856ba1e83b9da15f72c6a4c047beac7ba271301a4766789591fbc3a3c1b0fe19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"error","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/856ba1e83b9da15f72c6a4c047beac7ba271301a4766789591fbc3a3c1b0fe19"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"}
{"level":"error","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c"}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe5f66402c2d1d245381dda318aa43fd71df713d2d8db902d1813a48a832a9f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b068c538b23eed1c3f70de9e34ddec278b05be96ae674bda91bf6849be4977d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe5f66402c2d1d245381dda318aa43fd71df713d2d8db902d1813a48a832a9f7"}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b068c538b23eed1c3f70de9e34ddec278b05be96ae674bda91bf6849be4977d2"}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2"}
{"level":"error","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"error","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c95794bdfb8863379e6dec3c404a88216b4054892f942b499cf55b64ddff364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c95794bdfb8863379e6dec3c404a88216b4054892f942b499cf55b64ddff364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c95794bdfb8863379e6dec3c404a88216b4054892f942b499cf55b64ddff364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c95794bdfb8863379e6dec3c404a88216b4054892f942b499cf55b64ddff364","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c95794bdfb8863379e6dec3c404a88216b4054892f942b499cf55b64ddff364"}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c95794bdfb8863379e6dec3c404a88216b4054892f942b499cf55b64ddff364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c95794bdfb8863379e6dec3c404a88216b4054892f942b499cf55b64ddff364"}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c95794bdfb8863379e6dec3c404a88216b4054892f942b499cf55b64ddff364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c95794bdfb8863379e6dec3c404a88216b4054892f942b499cf55b64ddff364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c95794bdfb8863379e6dec3c404a88216b4054892f942b499cf55b64ddff364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c95794bdfb8863379e6dec3c404a88216b4054892f942b499cf55b64ddff364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba3f4338cbeb5d20746fa931d2d4ecdb6ebc9c07fada4d557b86a7fe7c5716c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c95794bdfb8863379e6dec3c404a88216b4054892f942b499cf55b64ddff364"}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba3f4338cbeb5d20746fa931d2d4ecdb6ebc9c07fada4d557b86a7fe7c5716c"}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"def37c532773eeaebca65fe0fe26edf34eee8453b02f53a221cbdd45926e30a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba677cfd7ac0c33807c37973caa9fccbaf5728abcf06fe4505ecbf354552e016","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/def37c532773eeaebca65fe0fe26edf34eee8453b02f53a221cbdd45926e30a7"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a88a98c1b0cf2e0582b4cea688b35cbf2cca09c1c57b7f5e2bcceb1c5094b4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ff18bb014e934b6306dd7159ab9b729860b83d7a695ce26c257d751890d359","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba677cfd7ac0c33807c37973caa9fccbaf5728abcf06fe4505ecbf354552e016"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a88a98c1b0cf2e0582b4cea688b35cbf2cca09c1c57b7f5e2bcceb1c5094b4c"}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ff18bb014e934b6306dd7159ab9b729860b83d7a695ce26c257d751890d359"}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd"}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"}
{"level":"info","ts":"2026-07-14T20:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e"}
{"level":"info","ts":"2026-07-14T20:36:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abb3c128-07d8-4b0c-b872-b8f688053ef3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47424","PortSpecifier":{"PortValue":47424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abb3c128-07d8-4b0c-b872-b8f688053ef3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:36:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abb3c128-07d8-4b0c-b872-b8f688053ef3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47424","PortSpecifier":{"PortValue":47424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061377,"nanos":982382909},"http":{"id":"abb3c128-07d8-4b0c-b872-b8f688053ef3","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:36:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"abb3c128-07d8-4b0c-b872-b8f688053ef3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:36:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abb3c128-07d8-4b0c-b872-b8f688053ef3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:36:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abb3c128-07d8-4b0c-b872-b8f688053ef3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:36:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abb3c128-07d8-4b0c-b872-b8f688053ef3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abb3c128-07d8-4b0c-b872-b8f688053ef3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abb3c128-07d8-4b0c-b872-b8f688053ef3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/sub-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"abb3c128-07d8-4b0c-b872-b8f688053ef3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:36:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abb3c128-07d8-4b0c-b872-b8f688053ef3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:36:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abb3c128-07d8-4b0c-b872-b8f688053ef3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:36:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abb3c128-07d8-4b0c-b872-b8f688053ef3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:36:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abb3c128-07d8-4b0c-b872-b8f688053ef3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76cb8290-926e-44c5-af5e-a34bae2c08cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40420","PortSpecifier":{"PortValue":40420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76cb8290-926e-44c5-af5e-a34bae2c08cb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76cb8290-926e-44c5-af5e-a34bae2c08cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40420","PortSpecifier":{"PortValue":40420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061378,"nanos":24890692},"http":{"id":"76cb8290-926e-44c5-af5e-a34bae2c08cb","method":"POST","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76cb8290-926e-44c5-af5e-a34bae2c08cb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76cb8290-926e-44c5-af5e-a34bae2c08cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76cb8290-926e-44c5-af5e-a34bae2c08cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76cb8290-926e-44c5-af5e-a34bae2c08cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76cb8290-926e-44c5-af5e-a34bae2c08cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76cb8290-926e-44c5-af5e-a34bae2c08cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4143c/sub-test-model-d4143c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4143c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76cb8290-926e-44c5-af5e-a34bae2c08cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76cb8290-926e-44c5-af5e-a34bae2c08cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76cb8290-926e-44c5-af5e-a34bae2c08cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76cb8290-926e-44c5-af5e-a34bae2c08cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76cb8290-926e-44c5-af5e-a34bae2c08cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47436","PortSpecifier":{"PortValue":47436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47436","PortSpecifier":{"PortValue":47436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061378,"nanos":60773739},"http":{"id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","method":"GET","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-H9BEzewA23UzFmM5_b956QA0fGI9hCIjHytCzBUQQhCABNN0m0TpZ3tc6c7m"}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-H9BEzewA23UzFmM5_b956QA0fGI9hCIjHytCzBUQQhCABNN0m0TpZ3tc6c7m\"}"}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ad5abeeb-e4f3-4ae4-9c3e-38888df4b2d9","keyName":"e2e-sub-iso-ff9680","subscription":"e2e-a-only-26c6c4","tenant":"e2e-shared-a-e55cd3","userId":"ad5abeeb-e4f3-4ae4-9c3e-38888df4b2d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/sub-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-26c6c4"}
{"level":"info","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e773c1c9-36cc-48b3-a232-9bf34c074f56","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40424","PortSpecifier":{"PortValue":40424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40424","PortSpecifier":{"PortValue":40424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061378,"nanos":91567823},"http":{"id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","method":"GET","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10Vvmb0bYlMOkj41e_uXvLLPb0ZkKCactKj7VZfoaw045fSuEe0NlGqRmwwlD"}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d4143c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10Vvmb0bYlMOkj41e_uXvLLPb0ZkKCactKj7VZfoaw045fSuEe0NlGqRmwwlD\"}"}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d4143c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f578bb5c-db5d-424f-a112-f3c69d7fdf7d","keyName":"e2e-sub-iso-9fceee","subscription":"e2e-b-only-26c6c4","tenant":"e2e-shared-b-d4143c","userId":"f578bb5c-db5d-424f-a112-f3c69d7fdf7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4143c/sub-test-model-d4143c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4143c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-26c6c4"}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:36:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57828a61-7db9-49c1-b5ed-ac3e683ae9ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e36e328-ba66-4f47-92c0-4d7891cf95f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51646","PortSpecifier":{"PortValue":51646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e36e328-ba66-4f47-92c0-4d7891cf95f7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e36e328-ba66-4f47-92c0-4d7891cf95f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51646","PortSpecifier":{"PortValue":51646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061390,"nanos":603141718},"http":{"id":"4e36e328-ba66-4f47-92c0-4d7891cf95f7","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e36e328-ba66-4f47-92c0-4d7891cf95f7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e36e328-ba66-4f47-92c0-4d7891cf95f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e36e328-ba66-4f47-92c0-4d7891cf95f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e36e328-ba66-4f47-92c0-4d7891cf95f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e36e328-ba66-4f47-92c0-4d7891cf95f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e36e328-ba66-4f47-92c0-4d7891cf95f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/sub-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e36e328-ba66-4f47-92c0-4d7891cf95f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e36e328-ba66-4f47-92c0-4d7891cf95f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e36e328-ba66-4f47-92c0-4d7891cf95f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e36e328-ba66-4f47-92c0-4d7891cf95f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e36e328-ba66-4f47-92c0-4d7891cf95f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a902eb6c-2633-4678-93f3-e6ccb943df92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54440","PortSpecifier":{"PortValue":54440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a902eb6c-2633-4678-93f3-e6ccb943df92","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a902eb6c-2633-4678-93f3-e6ccb943df92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54440","PortSpecifier":{"PortValue":54440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061390,"nanos":642495612},"http":{"id":"a902eb6c-2633-4678-93f3-e6ccb943df92","method":"POST","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a902eb6c-2633-4678-93f3-e6ccb943df92","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a902eb6c-2633-4678-93f3-e6ccb943df92","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a902eb6c-2633-4678-93f3-e6ccb943df92","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a902eb6c-2633-4678-93f3-e6ccb943df92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a902eb6c-2633-4678-93f3-e6ccb943df92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a902eb6c-2633-4678-93f3-e6ccb943df92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4143c/sub-test-model-d4143c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4143c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a902eb6c-2633-4678-93f3-e6ccb943df92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a902eb6c-2633-4678-93f3-e6ccb943df92","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a902eb6c-2633-4678-93f3-e6ccb943df92","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a902eb6c-2633-4678-93f3-e6ccb943df92","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a902eb6c-2633-4678-93f3-e6ccb943df92","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cecfa7ad-2494-4b3b-a071-9732b303e167","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51650","PortSpecifier":{"PortValue":51650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cecfa7ad-2494-4b3b-a071-9732b303e167","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cecfa7ad-2494-4b3b-a071-9732b303e167","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51650","PortSpecifier":{"PortValue":51650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061390,"nanos":683515212},"http":{"id":"cecfa7ad-2494-4b3b-a071-9732b303e167","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cecfa7ad-2494-4b3b-a071-9732b303e167","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kXUhyqHt1x11Z22s_9KwF0g9VUugKcEizJmi76VFTw85eK2GQfXvpg7uH57S"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cecfa7ad-2494-4b3b-a071-9732b303e167","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kXUhyqHt1x11Z22s_9KwF0g9VUugKcEizJmi76VFTw85eK2GQfXvpg7uH57S\"}"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cecfa7ad-2494-4b3b-a071-9732b303e167","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4b19726-01e2-4be7-855e-2c53c26457d1","keyName":"e2e-sub-iso-81b2e1","subscription":"e2e-shared-sub-c91473","tenant":"e2e-shared-a-e55cd3","userId":"e4b19726-01e2-4be7-855e-2c53c26457d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cecfa7ad-2494-4b3b-a071-9732b303e167","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cecfa7ad-2494-4b3b-a071-9732b303e167","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cecfa7ad-2494-4b3b-a071-9732b303e167","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cecfa7ad-2494-4b3b-a071-9732b303e167","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/sub-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cecfa7ad-2494-4b3b-a071-9732b303e167","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cecfa7ad-2494-4b3b-a071-9732b303e167","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cecfa7ad-2494-4b3b-a071-9732b303e167","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c91473"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cecfa7ad-2494-4b3b-a071-9732b303e167","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cecfa7ad-2494-4b3b-a071-9732b303e167","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cecfa7ad-2494-4b3b-a071-9732b303e167","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b01e4508-15b4-4609-a973-50248bff9f4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54442","PortSpecifier":{"PortValue":54442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b01e4508-15b4-4609-a973-50248bff9f4c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b01e4508-15b4-4609-a973-50248bff9f4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54442","PortSpecifier":{"PortValue":54442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061390,"nanos":720174548},"http":{"id":"b01e4508-15b4-4609-a973-50248bff9f4c","method":"POST","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b01e4508-15b4-4609-a973-50248bff9f4c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nXeZbwaYKya9tx4F_BioFhNipGoFfLwm1Pqx6fXuDHVaU1fqscBb8Q8jbKo1"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b01e4508-15b4-4609-a973-50248bff9f4c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d4143c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nXeZbwaYKya9tx4F_BioFhNipGoFfLwm1Pqx6fXuDHVaU1fqscBb8Q8jbKo1\"}"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b01e4508-15b4-4609-a973-50248bff9f4c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d4143c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"39f4a4fc-9ca6-46c3-8502-29bdb38ba0b2","keyName":"e2e-sub-iso-b7dbe8","subscription":"e2e-shared-sub-c91473","tenant":"e2e-shared-b-d4143c","userId":"39f4a4fc-9ca6-46c3-8502-29bdb38ba0b2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b01e4508-15b4-4609-a973-50248bff9f4c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b01e4508-15b4-4609-a973-50248bff9f4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b01e4508-15b4-4609-a973-50248bff9f4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b01e4508-15b4-4609-a973-50248bff9f4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4143c/sub-test-model-d4143c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4143c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b01e4508-15b4-4609-a973-50248bff9f4c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c91473"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b01e4508-15b4-4609-a973-50248bff9f4c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b01e4508-15b4-4609-a973-50248bff9f4c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b01e4508-15b4-4609-a973-50248bff9f4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b01e4508-15b4-4609-a973-50248bff9f4c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b01e4508-15b4-4609-a973-50248bff9f4c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/919f47d1961c3f3af82692177c5cd138681f316d7a7838c6443e5dacdd9ec40c"}
{"level":"info","ts":"2026-07-14T20:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f62c308589eadb54a7c4341a362285d50b81fca7f308b6c1defc7991e76136f8"}
{"level":"info","ts":"2026-07-14T20:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b068c538b23eed1c3f70de9e34ddec278b05be96ae674bda91bf6849be4977d2"}
{"level":"info","ts":"2026-07-14T20:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58b5a0d3551a5c46191b886671668bed1ea0cb5a0abb059f00863f974ab569da"}
{"level":"info","ts":"2026-07-14T20:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/def37c532773eeaebca65fe0fe26edf34eee8453b02f53a221cbdd45926e30a7"}
{"level":"info","ts":"2026-07-14T20:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a733cb7cf91b2aa8a07ccb093127884dffa1135fc150fdc6c51ed4441dfed667"}
{"level":"info","ts":"2026-07-14T20:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ede8d4b2558a0b5222def1fae453085f034c197755b2c0b9843fa1cf10630a11"}
{"level":"info","ts":"2026-07-14T20:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2acceef5d78e4fa124508414b5f83b60b8b6df778e5a6cbd6f09c426e73116d"}
{"level":"info","ts":"2026-07-14T20:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f449cacf9d4b0b59fb1d11b3622dc35111ab58f70a5a42e4bc02b42dd1d7ede5"}
{"level":"info","ts":"2026-07-14T20:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89ff18bb014e934b6306dd7159ab9b729860b83d7a695ce26c257d751890d359"}
{"level":"info","ts":"2026-07-14T20:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0383b9f24e898596af4b592c75934dadd581afcd8ab00c9d450288d722a86ee8"}
{"level":"info","ts":"2026-07-14T20:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe5f66402c2d1d245381dda318aa43fd71df713d2d8db902d1813a48a832a9f7"}
{"level":"info","ts":"2026-07-14T20:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a88a98c1b0cf2e0582b4cea688b35cbf2cca09c1c57b7f5e2bcceb1c5094b4c"}
{"level":"info","ts":"2026-07-14T20:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/856ba1e83b9da15f72c6a4c047beac7ba271301a4766789591fbc3a3c1b0fe19"}
{"level":"info","ts":"2026-07-14T20:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/782511c58bb945ec010a1915e63227369e4e76f2508beeeabfc3412b74ab74fc"}
{"level":"info","ts":"2026-07-14T20:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a6aa7c1652b1aac0a0a2f261f267fd3fb3a5cd7af43517ab987e264ce957ed2"}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938"}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938"}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938"}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a0db9620eda2bc77deefea0e59c17573c96cd1604033e1889c6721be2ee8059","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a0db9620eda2bc77deefea0e59c17573c96cd1604033e1889c6721be2ee8059","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0db9620eda2bc77deefea0e59c17573c96cd1604033e1889c6721be2ee8059","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0db9620eda2bc77deefea0e59c17573c96cd1604033e1889c6721be2ee8059","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a0db9620eda2bc77deefea0e59c17573c96cd1604033e1889c6721be2ee8059"}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0db9620eda2bc77deefea0e59c17573c96cd1604033e1889c6721be2ee8059","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a0db9620eda2bc77deefea0e59c17573c96cd1604033e1889c6721be2ee8059"}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a0db9620eda2bc77deefea0e59c17573c96cd1604033e1889c6721be2ee8059","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a0db9620eda2bc77deefea0e59c17573c96cd1604033e1889c6721be2ee8059"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a0db9620eda2bc77deefea0e59c17573c96cd1604033e1889c6721be2ee8059","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0db9620eda2bc77deefea0e59c17573c96cd1604033e1889c6721be2ee8059","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a0db9620eda2bc77deefea0e59c17573c96cd1604033e1889c6721be2ee8059"}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160"}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b442ca0c215b49194732dd56ef06355bd1e631c6d6e62429900ed101b9e50e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b442ca0c215b49194732dd56ef06355bd1e631c6d6e62429900ed101b9e50e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b442ca0c215b49194732dd56ef06355bd1e631c6d6e62429900ed101b9e50e6"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b442ca0c215b49194732dd56ef06355bd1e631c6d6e62429900ed101b9e50e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b442ca0c215b49194732dd56ef06355bd1e631c6d6e62429900ed101b9e50e6"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b442ca0c215b49194732dd56ef06355bd1e631c6d6e62429900ed101b9e50e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b442ca0c215b49194732dd56ef06355bd1e631c6d6e62429900ed101b9e50e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b442ca0c215b49194732dd56ef06355bd1e631c6d6e62429900ed101b9e50e6"}
{"level":"info","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9db899a8722f75eeb1c2a71f57f34eea9c77489b79f464dfe2b84e18f61ce766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"}
{"level":"info","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9db899a8722f75eeb1c2a71f57f34eea9c77489b79f464dfe2b84e18f61ce766","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9db899a8722f75eeb1c2a71f57f34eea9c77489b79f464dfe2b84e18f61ce766"}
{"level":"info","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b442ca0c215b49194732dd56ef06355bd1e631c6d6e62429900ed101b9e50e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b442ca0c215b49194732dd56ef06355bd1e631c6d6e62429900ed101b9e50e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be"}
{"level":"info","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b442ca0c215b49194732dd56ef06355bd1e631c6d6e62429900ed101b9e50e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"}
{"level":"info","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9db899a8722f75eeb1c2a71f57f34eea9c77489b79f464dfe2b84e18f61ce766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:36:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9db899a8722f75eeb1c2a71f57f34eea9c77489b79f464dfe2b84e18f61ce766","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b442ca0c215b49194732dd56ef06355bd1e631c6d6e62429900ed101b9e50e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9db899a8722f75eeb1c2a71f57f34eea9c77489b79f464dfe2b84e18f61ce766"}
{"level":"info","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9db899a8722f75eeb1c2a71f57f34eea9c77489b79f464dfe2b84e18f61ce766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:36:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:36:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9db899a8722f75eeb1c2a71f57f34eea9c77489b79f464dfe2b84e18f61ce766"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9db899a8722f75eeb1c2a71f57f34eea9c77489b79f464dfe2b84e18f61ce766","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9db899a8722f75eeb1c2a71f57f34eea9c77489b79f464dfe2b84e18f61ce766","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be"}
{"level":"info","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b442ca0c215b49194732dd56ef06355bd1e631c6d6e62429900ed101b9e50e6"}
{"level":"info","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"}
{"level":"info","ts":"2026-07-14T20:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9db899a8722f75eeb1c2a71f57f34eea9c77489b79f464dfe2b84e18f61ce766"}
{"level":"debug","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"info","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"error","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3"}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"error","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3"}
{"level":"error","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d09a2f25bdc5fddb0f1be5255230414d5b814493d6fa5e41164d8cfbd562c33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d09a2f25bdc5fddb0f1be5255230414d5b814493d6fa5e41164d8cfbd562c33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d09a2f25bdc5fddb0f1be5255230414d5b814493d6fa5e41164d8cfbd562c33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d09a2f25bdc5fddb0f1be5255230414d5b814493d6fa5e41164d8cfbd562c33"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d09a2f25bdc5fddb0f1be5255230414d5b814493d6fa5e41164d8cfbd562c33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d09a2f25bdc5fddb0f1be5255230414d5b814493d6fa5e41164d8cfbd562c33"}
{"level":"debug","ts":"2026-07-14T20:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d09a2f25bdc5fddb0f1be5255230414d5b814493d6fa5e41164d8cfbd562c33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d09a2f25bdc5fddb0f1be5255230414d5b814493d6fa5e41164d8cfbd562c33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d09a2f25bdc5fddb0f1be5255230414d5b814493d6fa5e41164d8cfbd562c33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d09a2f25bdc5fddb0f1be5255230414d5b814493d6fa5e41164d8cfbd562c33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d09a2f25bdc5fddb0f1be5255230414d5b814493d6fa5e41164d8cfbd562c33"}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a"}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a"}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a"}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a"}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5"}
{"level":"error","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5"}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1a9220908b9c9d641eb3a322bb61539be4bcb6c41e581e96c27ea5ebcc9290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a"}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1a9220908b9c9d641eb3a322bb61539be4bcb6c41e581e96c27ea5ebcc9290","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1a9220908b9c9d641eb3a322bb61539be4bcb6c41e581e96c27ea5ebcc9290"}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1a9220908b9c9d641eb3a322bb61539be4bcb6c41e581e96c27ea5ebcc9290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1a9220908b9c9d641eb3a322bb61539be4bcb6c41e581e96c27ea5ebcc9290"}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1a9220908b9c9d641eb3a322bb61539be4bcb6c41e581e96c27ea5ebcc9290","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5"}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1a9220908b9c9d641eb3a322bb61539be4bcb6c41e581e96c27ea5ebcc9290","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1a9220908b9c9d641eb3a322bb61539be4bcb6c41e581e96c27ea5ebcc9290"}
{"level":"error","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1a9220908b9c9d641eb3a322bb61539be4bcb6c41e581e96c27ea5ebcc9290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a1a9220908b9c9d641eb3a322bb61539be4bcb6c41e581e96c27ea5ebcc9290"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1a9220908b9c9d641eb3a322bb61539be4bcb6c41e581e96c27ea5ebcc9290","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5"}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1a9220908b9c9d641eb3a322bb61539be4bcb6c41e581e96c27ea5ebcc9290","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4"}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1a9220908b9c9d641eb3a322bb61539be4bcb6c41e581e96c27ea5ebcc9290"}
{"level":"error","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4"}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4"}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4"}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4"}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4"}
{"level":"info","ts":"2026-07-14T20:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e"}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e"}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e"}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e"}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e"}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95"}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5"}
{"level":"info","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5"}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c95794bdfb8863379e6dec3c404a88216b4054892f942b499cf55b64ddff364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"error","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5"}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c95794bdfb8863379e6dec3c404a88216b4054892f942b499cf55b64ddff364"}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a"}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1a9220908b9c9d641eb3a322bb61539be4bcb6c41e581e96c27ea5ebcc9290","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938"}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1a9220908b9c9d641eb3a322bb61539be4bcb6c41e581e96c27ea5ebcc9290"}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938"}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be"}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba3f4338cbeb5d20746fa931d2d4ecdb6ebc9c07fada4d557b86a7fe7c5716c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4"}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba677cfd7ac0c33807c37973caa9fccbaf5728abcf06fe4505ecbf354552e016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be"}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba3f4338cbeb5d20746fa931d2d4ecdb6ebc9c07fada4d557b86a7fe7c5716c"}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d09a2f25bdc5fddb0f1be5255230414d5b814493d6fa5e41164d8cfbd562c33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba677cfd7ac0c33807c37973caa9fccbaf5728abcf06fe4505ecbf354552e016"}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b442ca0c215b49194732dd56ef06355bd1e631c6d6e62429900ed101b9e50e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be"}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d09a2f25bdc5fddb0f1be5255230414d5b814493d6fa5e41164d8cfbd562c33"}
{"level":"debug","ts":"2026-07-14T20:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b442ca0c215b49194732dd56ef06355bd1e631c6d6e62429900ed101b9e50e6"}
{"level":"info","ts":"2026-07-14T20:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160"}
{"level":"debug","ts":"2026-07-14T20:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0db9620eda2bc77deefea0e59c17573c96cd1604033e1889c6721be2ee8059","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3"}
{"level":"debug","ts":"2026-07-14T20:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a0db9620eda2bc77deefea0e59c17573c96cd1604033e1889c6721be2ee8059"}
{"level":"debug","ts":"2026-07-14T20:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9db899a8722f75eeb1c2a71f57f34eea9c77489b79f464dfe2b84e18f61ce766","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd"}
{"level":"info","ts":"2026-07-14T20:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9db899a8722f75eeb1c2a71f57f34eea9c77489b79f464dfe2b84e18f61ce766"}
{"level":"info","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18fa49c4-850c-4119-a8c1-0a26454ad156","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43372","PortSpecifier":{"PortValue":43372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18fa49c4-850c-4119-a8c1-0a26454ad156","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18fa49c4-850c-4119-a8c1-0a26454ad156","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43372","PortSpecifier":{"PortValue":43372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061475,"nanos":63639025},"http":{"id":"18fa49c4-850c-4119-a8c1-0a26454ad156","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"18fa49c4-850c-4119-a8c1-0a26454ad156","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18fa49c4-850c-4119-a8c1-0a26454ad156","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18fa49c4-850c-4119-a8c1-0a26454ad156","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18fa49c4-850c-4119-a8c1-0a26454ad156","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18fa49c4-850c-4119-a8c1-0a26454ad156","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18fa49c4-850c-4119-a8c1-0a26454ad156","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18fa49c4-850c-4119-a8c1-0a26454ad156","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18fa49c4-850c-4119-a8c1-0a26454ad156","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18fa49c4-850c-4119-a8c1-0a26454ad156","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18fa49c4-850c-4119-a8c1-0a26454ad156","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18fa49c4-850c-4119-a8c1-0a26454ad156","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf4fe602-5978-4250-a30b-c8ff8dbfd879","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43978","PortSpecifier":{"PortValue":43978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf4fe602-5978-4250-a30b-c8ff8dbfd879","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf4fe602-5978-4250-a30b-c8ff8dbfd879","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43978","PortSpecifier":{"PortValue":43978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061475,"nanos":106678825},"http":{"id":"cf4fe602-5978-4250-a30b-c8ff8dbfd879","method":"POST","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf4fe602-5978-4250-a30b-c8ff8dbfd879","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf4fe602-5978-4250-a30b-c8ff8dbfd879","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf4fe602-5978-4250-a30b-c8ff8dbfd879","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf4fe602-5978-4250-a30b-c8ff8dbfd879","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf4fe602-5978-4250-a30b-c8ff8dbfd879","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf4fe602-5978-4250-a30b-c8ff8dbfd879","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4143c/rate-test-model-d4143c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4143c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf4fe602-5978-4250-a30b-c8ff8dbfd879","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf4fe602-5978-4250-a30b-c8ff8dbfd879","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf4fe602-5978-4250-a30b-c8ff8dbfd879","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf4fe602-5978-4250-a30b-c8ff8dbfd879","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf4fe602-5978-4250-a30b-c8ff8dbfd879","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43378","PortSpecifier":{"PortValue":43378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b132452b-a796-41d4-b124-e523e1eed5dd","method":"POST","path":"/ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3/v1/completions","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43378","PortSpecifier":{"PortValue":43378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061475,"nanos":147605274},"http":{"id":"b132452b-a796-41d4-b124-e523e1eed5dd","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rkgT3b1dhsJwOmv0_iPh011Hln4GB8cvKAieWyEqz2glELK3UgBiMqBbohYy"}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rkgT3b1dhsJwOmv0_iPh011Hln4GB8cvKAieWyEqz2glELK3UgBiMqBbohYy\"}"}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f25a35f-40dd-44d7-bcef-d527b30866d0","keyName":"e2e-rate-a-7064b6","subscription":"e2e-rate-iso-a-7064b6","tenant":"e2e-shared-a-e55cd3","userId":"7f25a35f-40dd-44d7-bcef-d527b30866d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3\",\"requestedSubscription\":\"e2e-rate-iso-a-7064b6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e55cd3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7064b6","namespace":"ai-tenant-e2e-shared-a-e55cd3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7064b6"}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f25a35f-40dd-44d7-bcef-d527b30866d0","keyName":"e2e-rate-a-7064b6","selected_subscription":"e2e-rate-iso-a-7064b6","selected_subscription_key":"ai-tenant-e2e-shared-a-e55cd3/e2e-rate-iso-a-7064b6@ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e55cd3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7064b6","namespace":"ai-tenant-e2e-shared-a-e55cd3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:37:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b132452b-a796-41d4-b124-e523e1eed5dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43382","PortSpecifier":{"PortValue":43382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","method":"POST","path":"/ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3/v1/completions","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43382","PortSpecifier":{"PortValue":43382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061476,"nanos":245853043},"http":{"id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rkgT3b1dhsJwOmv0_iPh011Hln4GB8cvKAieWyEqz2glELK3UgBiMqBbohYy"}
{"level":"debug","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rkgT3b1dhsJwOmv0_iPh011Hln4GB8cvKAieWyEqz2glELK3UgBiMqBbohYy\"}"}
{"level":"debug","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f25a35f-40dd-44d7-bcef-d527b30866d0","keyName":"e2e-rate-a-7064b6","subscription":"e2e-rate-iso-a-7064b6","tenant":"e2e-shared-a-e55cd3","userId":"7f25a35f-40dd-44d7-bcef-d527b30866d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3\",\"requestedSubscription\":\"e2e-rate-iso-a-7064b6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e55cd3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7064b6","namespace":"ai-tenant-e2e-shared-a-e55cd3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7064b6"}
{"level":"debug","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f25a35f-40dd-44d7-bcef-d527b30866d0","keyName":"e2e-rate-a-7064b6","selected_subscription":"e2e-rate-iso-a-7064b6","selected_subscription_key":"ai-tenant-e2e-shared-a-e55cd3/e2e-rate-iso-a-7064b6@ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e55cd3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7064b6","namespace":"ai-tenant-e2e-shared-a-e55cd3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:37:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d09ac44-8466-442e-b4fb-ed4cdf5894d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40b4453d-78ec-4926-8336-da5166cb3985","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43398","PortSpecifier":{"PortValue":43398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40b4453d-78ec-4926-8336-da5166cb3985","method":"POST","path":"/ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3/v1/completions","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40b4453d-78ec-4926-8336-da5166cb3985","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43398","PortSpecifier":{"PortValue":43398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061477,"nanos":292510619},"http":{"id":"40b4453d-78ec-4926-8336-da5166cb3985","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40b4453d-78ec-4926-8336-da5166cb3985","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rkgT3b1dhsJwOmv0_iPh011Hln4GB8cvKAieWyEqz2glELK3UgBiMqBbohYy"}
{"level":"debug","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40b4453d-78ec-4926-8336-da5166cb3985","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rkgT3b1dhsJwOmv0_iPh011Hln4GB8cvKAieWyEqz2glELK3UgBiMqBbohYy\"}"}
{"level":"debug","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40b4453d-78ec-4926-8336-da5166cb3985","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f25a35f-40dd-44d7-bcef-d527b30866d0","keyName":"e2e-rate-a-7064b6","subscription":"e2e-rate-iso-a-7064b6","tenant":"e2e-shared-a-e55cd3","userId":"7f25a35f-40dd-44d7-bcef-d527b30866d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40b4453d-78ec-4926-8336-da5166cb3985","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3\",\"requestedSubscription\":\"e2e-rate-iso-a-7064b6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40b4453d-78ec-4926-8336-da5166cb3985","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e55cd3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7064b6","namespace":"ai-tenant-e2e-shared-a-e55cd3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40b4453d-78ec-4926-8336-da5166cb3985","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b4453d-78ec-4926-8336-da5166cb3985","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b4453d-78ec-4926-8336-da5166cb3985","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b4453d-78ec-4926-8336-da5166cb3985","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b4453d-78ec-4926-8336-da5166cb3985","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b4453d-78ec-4926-8336-da5166cb3985","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b4453d-78ec-4926-8336-da5166cb3985","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7064b6"}
{"level":"debug","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b4453d-78ec-4926-8336-da5166cb3985","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b4453d-78ec-4926-8336-da5166cb3985","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f25a35f-40dd-44d7-bcef-d527b30866d0","keyName":"e2e-rate-a-7064b6","selected_subscription":"e2e-rate-iso-a-7064b6","selected_subscription_key":"ai-tenant-e2e-shared-a-e55cd3/e2e-rate-iso-a-7064b6@ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e55cd3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7064b6","namespace":"ai-tenant-e2e-shared-a-e55cd3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40b4453d-78ec-4926-8336-da5166cb3985","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:37:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40b4453d-78ec-4926-8336-da5166cb3985","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fed7deb6-6d2a-4a34-a01e-a95af12c36ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40714","PortSpecifier":{"PortValue":40714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fed7deb6-6d2a-4a34-a01e-a95af12c36ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fed7deb6-6d2a-4a34-a01e-a95af12c36ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40714","PortSpecifier":{"PortValue":40714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061490,"nanos":386788663},"http":{"id":"fed7deb6-6d2a-4a34-a01e-a95af12c36ae","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fed7deb6-6d2a-4a34-a01e-a95af12c36ae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fed7deb6-6d2a-4a34-a01e-a95af12c36ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fed7deb6-6d2a-4a34-a01e-a95af12c36ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fed7deb6-6d2a-4a34-a01e-a95af12c36ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fed7deb6-6d2a-4a34-a01e-a95af12c36ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fed7deb6-6d2a-4a34-a01e-a95af12c36ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fed7deb6-6d2a-4a34-a01e-a95af12c36ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fed7deb6-6d2a-4a34-a01e-a95af12c36ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fed7deb6-6d2a-4a34-a01e-a95af12c36ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fed7deb6-6d2a-4a34-a01e-a95af12c36ae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fed7deb6-6d2a-4a34-a01e-a95af12c36ae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa2bc66d-d49f-4838-ae7c-586ff17d1ce6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45084","PortSpecifier":{"PortValue":45084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa2bc66d-d49f-4838-ae7c-586ff17d1ce6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa2bc66d-d49f-4838-ae7c-586ff17d1ce6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45084","PortSpecifier":{"PortValue":45084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061490,"nanos":422816059},"http":{"id":"aa2bc66d-d49f-4838-ae7c-586ff17d1ce6","method":"POST","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa2bc66d-d49f-4838-ae7c-586ff17d1ce6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa2bc66d-d49f-4838-ae7c-586ff17d1ce6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"57494674-8183-413a-9c13-03a44bfda036","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"]}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa2bc66d-d49f-4838-ae7c-586ff17d1ce6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ec58a76b5df3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3a5e48f5-a3ed-4a03-80e3-492553b7b251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"57494674-8183-413a-9c13-03a44bfda036","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa2bc66d-d49f-4838-ae7c-586ff17d1ce6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa2bc66d-d49f-4838-ae7c-586ff17d1ce6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa2bc66d-d49f-4838-ae7c-586ff17d1ce6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4143c/rate-test-model-d4143c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4143c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa2bc66d-d49f-4838-ae7c-586ff17d1ce6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa2bc66d-d49f-4838-ae7c-586ff17d1ce6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa2bc66d-d49f-4838-ae7c-586ff17d1ce6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa2bc66d-d49f-4838-ae7c-586ff17d1ce6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa2bc66d-d49f-4838-ae7c-586ff17d1ce6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40718","PortSpecifier":{"PortValue":40718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9612c751-b1cc-43f4-a896-d640989a71c9","method":"POST","path":"/ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3/v1/completions","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40718","PortSpecifier":{"PortValue":40718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061490,"nanos":460696390},"http":{"id":"9612c751-b1cc-43f4-a896-d640989a71c9","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1D6bgKOOq6QNUbvm1_6ETrSSe5lhOMxN9oNRaHcijjJoMmS0gcCIcBB8ZOEZf"}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1D6bgKOOq6QNUbvm1_6ETrSSe5lhOMxN9oNRaHcijjJoMmS0gcCIcBB8ZOEZf\"}"}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b8ed550a-3eb0-45e5-a6ac-b46783fc0a45","keyName":"e2e-rate-a-97dede","subscription":"e2e-rate-iso-a-97dede","tenant":"e2e-shared-a-e55cd3","userId":"b8ed550a-3eb0-45e5-a6ac-b46783fc0a45","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3\",\"requestedSubscription\":\"e2e-rate-iso-a-97dede\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e55cd3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-97dede","namespace":"ai-tenant-e2e-shared-a-e55cd3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-97dede"}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b8ed550a-3eb0-45e5-a6ac-b46783fc0a45","keyName":"e2e-rate-a-97dede","selected_subscription":"e2e-rate-iso-a-97dede","selected_subscription_key":"ai-tenant-e2e-shared-a-e55cd3/e2e-rate-iso-a-97dede@ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e55cd3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-97dede","namespace":"ai-tenant-e2e-shared-a-e55cd3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9612c751-b1cc-43f4-a896-d640989a71c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40732","PortSpecifier":{"PortValue":40732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","method":"POST","path":"/ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3/v1/completions","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40732","PortSpecifier":{"PortValue":40732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061491,"nanos":498303209},"http":{"id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1D6bgKOOq6QNUbvm1_6ETrSSe5lhOMxN9oNRaHcijjJoMmS0gcCIcBB8ZOEZf"}
{"level":"debug","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1D6bgKOOq6QNUbvm1_6ETrSSe5lhOMxN9oNRaHcijjJoMmS0gcCIcBB8ZOEZf\"}"}
{"level":"debug","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b8ed550a-3eb0-45e5-a6ac-b46783fc0a45","keyName":"e2e-rate-a-97dede","subscription":"e2e-rate-iso-a-97dede","tenant":"e2e-shared-a-e55cd3","userId":"b8ed550a-3eb0-45e5-a6ac-b46783fc0a45","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3\",\"requestedSubscription\":\"e2e-rate-iso-a-97dede\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e55cd3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-97dede","namespace":"ai-tenant-e2e-shared-a-e55cd3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-97dede"}
{"level":"debug","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b8ed550a-3eb0-45e5-a6ac-b46783fc0a45","keyName":"e2e-rate-a-97dede","selected_subscription":"e2e-rate-iso-a-97dede","selected_subscription_key":"ai-tenant-e2e-shared-a-e55cd3/e2e-rate-iso-a-97dede@ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e55cd3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-97dede","namespace":"ai-tenant-e2e-shared-a-e55cd3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:38:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c2b69d3-6e85-4a92-85b7-4e3d81cbb4fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48794","PortSpecifier":{"PortValue":48794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","method":"POST","path":"/ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3/v1/completions","host":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48794","PortSpecifier":{"PortValue":48794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061492,"nanos":535863221},"http":{"id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","method":"POST","headers":{":authority":"e2e-shared-a-e55cd3.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1D6bgKOOq6QNUbvm1_6ETrSSe5lhOMxN9oNRaHcijjJoMmS0gcCIcBB8ZOEZf"}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1D6bgKOOq6QNUbvm1_6ETrSSe5lhOMxN9oNRaHcijjJoMmS0gcCIcBB8ZOEZf\"}"}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b8ed550a-3eb0-45e5-a6ac-b46783fc0a45","keyName":"e2e-rate-a-97dede","subscription":"e2e-rate-iso-a-97dede","tenant":"e2e-shared-a-e55cd3","userId":"b8ed550a-3eb0-45e5-a6ac-b46783fc0a45","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3\",\"requestedSubscription\":\"e2e-rate-iso-a-97dede\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e55cd3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e55cd3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-97dede","namespace":"ai-tenant-e2e-shared-a-e55cd3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e55cd3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-97dede"}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b8ed550a-3eb0-45e5-a6ac-b46783fc0a45","keyName":"e2e-rate-a-97dede","selected_subscription":"e2e-rate-iso-a-97dede","selected_subscription_key":"ai-tenant-e2e-shared-a-e55cd3/e2e-rate-iso-a-97dede@ai-tenant-e2e-shared-a-e55cd3/rate-test-model-e55cd3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e55cd3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-97dede","namespace":"ai-tenant-e2e-shared-a-e55cd3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b84c4da4-8b66-48fa-a6a6-fd3ebdea86a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48370","PortSpecifier":{"PortValue":48370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","method":"POST","path":"/ai-tenant-e2e-shared-b-d4143c/rate-test-model-d4143c/v1/completions","host":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48370","PortSpecifier":{"PortValue":48370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061492,"nanos":571017603},"http":{"id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","method":"POST","headers":{":authority":"e2e-shared-b-d4143c.apps.220c7fbc-7561-4489-9843-ec58a76b5df3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-d4143c/rate-test-model-d4143c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZnJNVuaN9MMwr4Bv_uMYwcsj4Mfcj0BLaIZPaR9ageRLO1hswy7bm6DjFcJN"}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d4143c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZnJNVuaN9MMwr4Bv_uMYwcsj4Mfcj0BLaIZPaR9ageRLO1hswy7bm6DjFcJN\"}"}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d4143c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4c2d7d5-b653-476e-9ce5-dd8fa9ec965e","keyName":"e2e-rate-b-97dede","subscription":"e2e-rate-iso-b-97dede","tenant":"e2e-shared-b-d4143c","userId":"e4c2d7d5-b653-476e-9ce5-dd8fa9ec965e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-d4143c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-d4143c/rate-test-model-d4143c\",\"requestedSubscription\":\"e2e-rate-iso-b-97dede\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d4143c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d4143c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-97dede","namespace":"ai-tenant-e2e-shared-b-d4143c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4143c/rate-test-model-d4143c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4143c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-97dede"}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4c2d7d5-b653-476e-9ce5-dd8fa9ec965e","keyName":"e2e-rate-b-97dede","selected_subscription":"e2e-rate-iso-b-97dede","selected_subscription_key":"ai-tenant-e2e-shared-b-d4143c/e2e-rate-iso-b-97dede@ai-tenant-e2e-shared-b-d4143c/rate-test-model-d4143c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d4143c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-97dede","namespace":"ai-tenant-e2e-shared-b-d4143c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:38:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c12979a-c5cd-4974-a5b8-3e5d47d89860","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d09a2f25bdc5fddb0f1be5255230414d5b814493d6fa5e41164d8cfbd562c33"}
{"level":"info","ts":"2026-07-14T20:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b41605807e83de359b9c0489e4c85c67a32628d2d4bd56739d0ec25178b755f4"}
{"level":"info","ts":"2026-07-14T20:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a0db9620eda2bc77deefea0e59c17573c96cd1604033e1889c6721be2ee8059"}
{"level":"info","ts":"2026-07-14T20:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30af6a69cebb0bde805b14ffc5806e7a4ca5ddf7a36e26347c27eb3e9cbc12bf"}
{"level":"info","ts":"2026-07-14T20:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b442ca0c215b49194732dd56ef06355bd1e631c6d6e62429900ed101b9e50e6"}
{"level":"info","ts":"2026-07-14T20:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bafcfc6457166f33f4eabf92dfe0c1174af93b22869ee3d3888de216a255e1a"}
{"level":"info","ts":"2026-07-14T20:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e5b1ddaf9b0a84a160a1e47d1dbb6dd82075720cef753132645a86b8603b7be"}
{"level":"info","ts":"2026-07-14T20:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a1a9220908b9c9d641eb3a322bb61539be4bcb6c41e581e96c27ea5ebcc9290"}
{"level":"info","ts":"2026-07-14T20:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4eeace9eaf1fe53f19cd7ae07b29fdba60d839326656a5b38bd73cb00643329"}
{"level":"info","ts":"2026-07-14T20:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07742b4352da3ca4833a4b8a0e6f971ee4416d0363da0817c164762b68f47160"}
{"level":"info","ts":"2026-07-14T20:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/204f0b6743fb87e3a2c50e2484b44610ae095bfcb6268da5d752fcf832972938"}
{"level":"info","ts":"2026-07-14T20:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9db899a8722f75eeb1c2a71f57f34eea9c77489b79f464dfe2b84e18f61ce766"}
{"level":"info","ts":"2026-07-14T20:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dae6b2a3230989a0788b15cbc233562af4838b1f1e7ca186ff79c0a49a7215b3"}
{"level":"info","ts":"2026-07-14T20:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9394b3ef7d716c668565cc4f3b4b9f8d2dd07c923bcf5c3a48f06713799b7982"}
{"level":"info","ts":"2026-07-14T20:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d9e1eb87b786e51b9718adc85c66891cf203a36772d2c085ab1c8749b9196e5"}
{"level":"info","ts":"2026-07-14T20:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51065e04ec144cc6d475464a2ec3ed1722493e39bd5fcd8e47cbdc01894b5a95"}
{"level":"info","ts":"2026-07-14T20:38:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d60ca849224080ad2459bf5a018558a31de282bf1294a9b91e52f2372ebd7412"}
{"level":"info","ts":"2026-07-14T20:38:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eba3f4338cbeb5d20746fa931d2d4ecdb6ebc9c07fada4d557b86a7fe7c5716c"}
{"level":"info","ts":"2026-07-14T20:38:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c95794bdfb8863379e6dec3c404a88216b4054892f942b499cf55b64ddff364"}
{"level":"info","ts":"2026-07-14T20:38:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66f2f1c7cee0efdd1389df0e3722dc5a48ed453110eb24973136656eab75201e"}
{"level":"info","ts":"2026-07-14T20:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5445225961a0efa25b274819c76a3dd20d91a784659c6b464ad54eb49c2e19e"}
{"level":"info","ts":"2026-07-14T20:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ba6494b52c67a3ba836173f32b9802f1f26075062ac61a78b385abe1f5959bd"}
{"level":"info","ts":"2026-07-14T20:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6afa591d7f32923176a19a50a6472198393908a38784aa2bc9f6ba640ba5e7e7"}
{"level":"info","ts":"2026-07-14T20:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba677cfd7ac0c33807c37973caa9fccbaf5728abcf06fe4505ecbf354552e016"}