--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-14T22:09:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12fb763a-16b2-4480-b79f-f377cab7e55f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:32908","PortSpecifier":{"PortValue":32908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12fb763a-16b2-4480-b79f-f377cab7e55f","method":"POST","path":"/ai-tenant-e2e-inf-b-5c6d83/test-model-5c6d83/v1/chat/completions","host":"e2e-inf-b-5c6d83.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:09:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12fb763a-16b2-4480-b79f-f377cab7e55f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:32908","PortSpecifier":{"PortValue":32908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784066952,"nanos":418922591},"http":{"id":"12fb763a-16b2-4480-b79f-f377cab7e55f","method":"POST","headers":{":authority":"e2e-inf-b-5c6d83.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-5c6d83/test-model-5c6d83/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:09:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12fb763a-16b2-4480-b79f-f377cab7e55f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Lk9pqGoaCh6QIjI2_9kjaBg5fJ7lNOCTqZelZpLA6okctRsbJLKbhtZpbd8b"}
{"level":"debug","ts":"2026-07-14T22:09:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12fb763a-16b2-4480-b79f-f377cab7e55f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-5c6d83.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Lk9pqGoaCh6QIjI2_9kjaBg5fJ7lNOCTqZelZpLA6okctRsbJLKbhtZpbd8b\"}"}
{"level":"debug","ts":"2026-07-14T22:09:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12fb763a-16b2-4480-b79f-f377cab7e55f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-5c6d83.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-14T22:09:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"12fb763a-16b2-4480-b79f-f377cab7e55f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-5c6d83.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-14T22:09:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12fb763a-16b2-4480-b79f-f377cab7e55f","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"ec9f9089e851cdbcce38bf7078ae72088043ab66e064e31a7e346ad48200019d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-5c6d83.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-5c6d83/test-model-5c6d83/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:09:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"12fb763a-16b2-4480-b79f-f377cab7e55f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-14T22:09:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12fb763a-16b2-4480-b79f-f377cab7e55f","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-14T22:09:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12fb763a-16b2-4480-b79f-f377cab7e55f","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-14T22:09:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec9f9089e851cdbcce38bf7078ae72088043ab66e064e31a7e346ad48200019d"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dec28756a992bcfa0f0be85cd84e486b3ef37aa4d584d5fd320a664d4a792887"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a7b3104e0e0f5572714ccf687e15e0bc664b1de00257cb9f2066942d6908558"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2fa8bef29b13d429d2494476869ed4c2391f7a63c74cddbde3310d097d253b2"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14e39d09a441308f3a11bd45129ed045314775e42648da271110af2f7bbdde0a"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6bc4eb9bd2b761bd928013eb649c374fcafa949210b17b4991baa0768711c22"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69cc96dd0be184eb0001132a5fb69e3d5c9e2218215b31a90a1db03ed499e903"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e558515403a0de933f603167ed8a8650f9a411e611eced8d54d1c76b3717522d"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0eb901c205d0601a82e70df4ac68c353b8ad459114360be678bbf799b85b541"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d64d329e512adcd76b304e21911e6d9fb8c3ebd5a0025ea441def83d090f1d09"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/066d090d2f35174d4f2ed2b9f45e2f4b8a788a7bd12a9430b26dd5b67fd1c5d3"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8b03dc2f8c0503fb0b8d8d8b0da3dd1a54d74414ea1aba7e40c49c224242aba"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb326c7ab5a7c0374cb944e7706eee76433e2aaa414675c5734f9a5668e9f571"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cea1f8da7a5b932606c0dda081cc1aa4bea98dcec256017ddf3684283f76028"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dee4da4c1252f488c9c477447caf6f08971b1dd1f6d9300ad6169a483bcb6502"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51174ae9c460b1e942c35968fafd304b62247dc9d71c24ff5bc10b4358d54fb5"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74d6d93dad8eac8ff6227d91f71cfd9e39111f39afbbb191d6eb3f5402ae1bd0"}
{"level":"info","ts":"2026-07-14T22:09:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/975e0df1688a7e03178fcac2c2c9ba45ebeea022e5616689d95880c5db02e02a"}
{"level":"info","ts":"2026-07-14T22:10:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55e3e6ac84c3f964f0050a8e137a09e41d91139eef022c0fc7404c2e07712d91"}
{"level":"info","ts":"2026-07-14T22:10:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c5ef2daacccd20b9e11cc7a57558306137460e6c35e510f9928d6ce4551b18f"}
{"level":"debug","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5188d63496b41b82f7b5a8bdf40f1006419b45d4a816ca7d86c7ade0f1403f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:10:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:10:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5188d63496b41b82f7b5a8bdf40f1006419b45d4a816ca7d86c7ade0f1403f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5188d63496b41b82f7b5a8bdf40f1006419b45d4a816ca7d86c7ade0f1403f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5188d63496b41b82f7b5a8bdf40f1006419b45d4a816ca7d86c7ade0f1403f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5188d63496b41b82f7b5a8bdf40f1006419b45d4a816ca7d86c7ade0f1403f"}
{"level":"debug","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5188d63496b41b82f7b5a8bdf40f1006419b45d4a816ca7d86c7ade0f1403f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5188d63496b41b82f7b5a8bdf40f1006419b45d4a816ca7d86c7ade0f1403f"}
{"level":"debug","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5188d63496b41b82f7b5a8bdf40f1006419b45d4a816ca7d86c7ade0f1403f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:10:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:10:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc5188d63496b41b82f7b5a8bdf40f1006419b45d4a816ca7d86c7ade0f1403f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5188d63496b41b82f7b5a8bdf40f1006419b45d4a816ca7d86c7ade0f1403f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90f16c1087be41e3b18b2803fc51b386c3f1a775c7d95d09901fcdd7b229a1bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:10:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:10:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90f16c1087be41e3b18b2803fc51b386c3f1a775c7d95d09901fcdd7b229a1bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5188d63496b41b82f7b5a8bdf40f1006419b45d4a816ca7d86c7ade0f1403f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90f16c1087be41e3b18b2803fc51b386c3f1a775c7d95d09901fcdd7b229a1bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90f16c1087be41e3b18b2803fc51b386c3f1a775c7d95d09901fcdd7b229a1bd"}
{"level":"debug","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90f16c1087be41e3b18b2803fc51b386c3f1a775c7d95d09901fcdd7b229a1bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:10:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:10:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90f16c1087be41e3b18b2803fc51b386c3f1a775c7d95d09901fcdd7b229a1bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90f16c1087be41e3b18b2803fc51b386c3f1a775c7d95d09901fcdd7b229a1bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90f16c1087be41e3b18b2803fc51b386c3f1a775c7d95d09901fcdd7b229a1bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5188d63496b41b82f7b5a8bdf40f1006419b45d4a816ca7d86c7ade0f1403f"}
{"level":"info","ts":"2026-07-14T22:10:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90f16c1087be41e3b18b2803fc51b386c3f1a775c7d95d09901fcdd7b229a1bd"}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23632fc50b2bb717d03f0fb939ac2aad13d703998852534be31723a116de9ae8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:10:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:10:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23632fc50b2bb717d03f0fb939ac2aad13d703998852534be31723a116de9ae8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23632fc50b2bb717d03f0fb939ac2aad13d703998852534be31723a116de9ae8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23632fc50b2bb717d03f0fb939ac2aad13d703998852534be31723a116de9ae8"}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23632fc50b2bb717d03f0fb939ac2aad13d703998852534be31723a116de9ae8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23632fc50b2bb717d03f0fb939ac2aad13d703998852534be31723a116de9ae8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23632fc50b2bb717d03f0fb939ac2aad13d703998852534be31723a116de9ae8"}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23632fc50b2bb717d03f0fb939ac2aad13d703998852534be31723a116de9ae8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:10:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:10:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23632fc50b2bb717d03f0fb939ac2aad13d703998852534be31723a116de9ae8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23632fc50b2bb717d03f0fb939ac2aad13d703998852534be31723a116de9ae8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23632fc50b2bb717d03f0fb939ac2aad13d703998852534be31723a116de9ae8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:10:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:10:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23632fc50b2bb717d03f0fb939ac2aad13d703998852534be31723a116de9ae8"}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:10:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:10:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9"}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9"}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:10:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:10:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:10:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:10:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9"}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9"}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:10:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:10:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:10:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9"}
{"level":"info","ts":"2026-07-14T22:10:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90f16c1087be41e3b18b2803fc51b386c3f1a775c7d95d09901fcdd7b229a1bd"}
{"level":"info","ts":"2026-07-14T22:10:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc5188d63496b41b82f7b5a8bdf40f1006419b45d4a816ca7d86c7ade0f1403f"}
{"level":"info","ts":"2026-07-14T22:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23632fc50b2bb717d03f0fb939ac2aad13d703998852534be31723a116de9ae8"}
{"level":"info","ts":"2026-07-14T22:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fbf48bcb6c9d07d49cba762bfe1231f401699160155f1315a420c1cbd4360a9"}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc"}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"}
{"level":"error","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180"}
{"level":"error","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180"}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"933dd8b286995af41403381a1af6b0b93f24d315c3c9e62fcfff3a77f55ce8e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"933dd8b286995af41403381a1af6b0b93f24d315c3c9e62fcfff3a77f55ce8e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"933dd8b286995af41403381a1af6b0b93f24d315c3c9e62fcfff3a77f55ce8e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/933dd8b286995af41403381a1af6b0b93f24d315c3c9e62fcfff3a77f55ce8e2"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"933dd8b286995af41403381a1af6b0b93f24d315c3c9e62fcfff3a77f55ce8e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"933dd8b286995af41403381a1af6b0b93f24d315c3c9e62fcfff3a77f55ce8e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["933dd8b286995af41403381a1af6b0b93f24d315c3c9e62fcfff3a77f55ce8e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"933dd8b286995af41403381a1af6b0b93f24d315c3c9e62fcfff3a77f55ce8e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/933dd8b286995af41403381a1af6b0b93f24d315c3c9e62fcfff3a77f55ce8e2"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"933dd8b286995af41403381a1af6b0b93f24d315c3c9e62fcfff3a77f55ce8e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180"}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/933dd8b286995af41403381a1af6b0b93f24d315c3c9e62fcfff3a77f55ce8e2"}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180"}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24de82abc5bf555b8ee7502f096fe51b6986ac0ee913bca2e7813f59ae25abea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24de82abc5bf555b8ee7502f096fe51b6986ac0ee913bca2e7813f59ae25abea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24de82abc5bf555b8ee7502f096fe51b6986ac0ee913bca2e7813f59ae25abea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24de82abc5bf555b8ee7502f096fe51b6986ac0ee913bca2e7813f59ae25abea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24de82abc5bf555b8ee7502f096fe51b6986ac0ee913bca2e7813f59ae25abea"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24de82abc5bf555b8ee7502f096fe51b6986ac0ee913bca2e7813f59ae25abea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24de82abc5bf555b8ee7502f096fe51b6986ac0ee913bca2e7813f59ae25abea"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24de82abc5bf555b8ee7502f096fe51b6986ac0ee913bca2e7813f59ae25abea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24de82abc5bf555b8ee7502f096fe51b6986ac0ee913bca2e7813f59ae25abea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24de82abc5bf555b8ee7502f096fe51b6986ac0ee913bca2e7813f59ae25abea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24de82abc5bf555b8ee7502f096fe51b6986ac0ee913bca2e7813f59ae25abea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24de82abc5bf555b8ee7502f096fe51b6986ac0ee913bca2e7813f59ae25abea"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bdd4a1a2eb769e5180ab0b4fbdba5dff29bc89204fe8b3a8175fd1e1ef05c8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bdd4a1a2eb769e5180ab0b4fbdba5dff29bc89204fe8b3a8175fd1e1ef05c8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bdd4a1a2eb769e5180ab0b4fbdba5dff29bc89204fe8b3a8175fd1e1ef05c8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8"}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bdd4a1a2eb769e5180ab0b4fbdba5dff29bc89204fe8b3a8175fd1e1ef05c8a"}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bdd4a1a2eb769e5180ab0b4fbdba5dff29bc89204fe8b3a8175fd1e1ef05c8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bdd4a1a2eb769e5180ab0b4fbdba5dff29bc89204fe8b3a8175fd1e1ef05c8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bdd4a1a2eb769e5180ab0b4fbdba5dff29bc89204fe8b3a8175fd1e1ef05c8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8"}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bdd4a1a2eb769e5180ab0b4fbdba5dff29bc89204fe8b3a8175fd1e1ef05c8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc00b74b82daeed31b50bafcbbd634e1eb3b07106fda0889a97308278ae5de3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec"}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc00b74b82daeed31b50bafcbbd634e1eb3b07106fda0889a97308278ae5de3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bdd4a1a2eb769e5180ab0b4fbdba5dff29bc89204fe8b3a8175fd1e1ef05c8a"}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc00b74b82daeed31b50bafcbbd634e1eb3b07106fda0889a97308278ae5de3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc00b74b82daeed31b50bafcbbd634e1eb3b07106fda0889a97308278ae5de3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc00b74b82daeed31b50bafcbbd634e1eb3b07106fda0889a97308278ae5de3"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc00b74b82daeed31b50bafcbbd634e1eb3b07106fda0889a97308278ae5de3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fc00b74b82daeed31b50bafcbbd634e1eb3b07106fda0889a97308278ae5de3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc00b74b82daeed31b50bafcbbd634e1eb3b07106fda0889a97308278ae5de3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc00b74b82daeed31b50bafcbbd634e1eb3b07106fda0889a97308278ae5de3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fc00b74b82daeed31b50bafcbbd634e1eb3b07106fda0889a97308278ae5de3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8"}
{"level":"error","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5fc00b74b82daeed31b50bafcbbd634e1eb3b07106fda0889a97308278ae5de3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5fc00b74b82daeed31b50bafcbbd634e1eb3b07106fda0889a97308278ae5de3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc00b74b82daeed31b50bafcbbd634e1eb3b07106fda0889a97308278ae5de3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc00b74b82daeed31b50bafcbbd634e1eb3b07106fda0889a97308278ae5de3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc00b74b82daeed31b50bafcbbd634e1eb3b07106fda0889a97308278ae5de3"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"debug","ts":"2026-07-14T22:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54e8f9a3defcef98eec98000e8acf3cf29a5793e5da3a27a4328d0ac50c03d7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54e8f9a3defcef98eec98000e8acf3cf29a5793e5da3a27a4328d0ac50c03d7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54e8f9a3defcef98eec98000e8acf3cf29a5793e5da3a27a4328d0ac50c03d7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54e8f9a3defcef98eec98000e8acf3cf29a5793e5da3a27a4328d0ac50c03d7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54e8f9a3defcef98eec98000e8acf3cf29a5793e5da3a27a4328d0ac50c03d7b"}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54e8f9a3defcef98eec98000e8acf3cf29a5793e5da3a27a4328d0ac50c03d7b"}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54e8f9a3defcef98eec98000e8acf3cf29a5793e5da3a27a4328d0ac50c03d7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54e8f9a3defcef98eec98000e8acf3cf29a5793e5da3a27a4328d0ac50c03d7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54e8f9a3defcef98eec98000e8acf3cf29a5793e5da3a27a4328d0ac50c03d7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54e8f9a3defcef98eec98000e8acf3cf29a5793e5da3a27a4328d0ac50c03d7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54e8f9a3defcef98eec98000e8acf3cf29a5793e5da3a27a4328d0ac50c03d7b"}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc"}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc"}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc"}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc"}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc"}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d04e0b67ac182556e161ac8218e380170a5c864473fbcaf253eb4ad076a1be0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d04e0b67ac182556e161ac8218e380170a5c864473fbcaf253eb4ad076a1be0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d04e0b67ac182556e161ac8218e380170a5c864473fbcaf253eb4ad076a1be0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d04e0b67ac182556e161ac8218e380170a5c864473fbcaf253eb4ad076a1be0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d04e0b67ac182556e161ac8218e380170a5c864473fbcaf253eb4ad076a1be0"}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d04e0b67ac182556e161ac8218e380170a5c864473fbcaf253eb4ad076a1be0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d04e0b67ac182556e161ac8218e380170a5c864473fbcaf253eb4ad076a1be0"}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d04e0b67ac182556e161ac8218e380170a5c864473fbcaf253eb4ad076a1be0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d04e0b67ac182556e161ac8218e380170a5c864473fbcaf253eb4ad076a1be0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d04e0b67ac182556e161ac8218e380170a5c864473fbcaf253eb4ad076a1be0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d04e0b67ac182556e161ac8218e380170a5c864473fbcaf253eb4ad076a1be0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d04e0b67ac182556e161ac8218e380170a5c864473fbcaf253eb4ad076a1be0"}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0"}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0"}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e"}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be8f9fb89d2689b5cf90631587524c08a3f7db0266af27156cae1994ea67c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be8f9fb89d2689b5cf90631587524c08a3f7db0266af27156cae1994ea67c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be8f9fb89d2689b5cf90631587524c08a3f7db0266af27156cae1994ea67c7d"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be8f9fb89d2689b5cf90631587524c08a3f7db0266af27156cae1994ea67c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be8f9fb89d2689b5cf90631587524c08a3f7db0266af27156cae1994ea67c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be8f9fb89d2689b5cf90631587524c08a3f7db0266af27156cae1994ea67c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be8f9fb89d2689b5cf90631587524c08a3f7db0266af27156cae1994ea67c7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88081bc62a24ae46a2697ea65781e4f440c072566f070d2d83c4a0187e917f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88081bc62a24ae46a2697ea65781e4f440c072566f070d2d83c4a0187e917f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be8f9fb89d2689b5cf90631587524c08a3f7db0266af27156cae1994ea67c7d"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af20c7c89382f6254080be3c1370d04f6e0362d8d3db202a02f9a0c3d58d04d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88081bc62a24ae46a2697ea65781e4f440c072566f070d2d83c4a0187e917f28"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af20c7c89382f6254080be3c1370d04f6e0362d8d3db202a02f9a0c3d58d04d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88081bc62a24ae46a2697ea65781e4f440c072566f070d2d83c4a0187e917f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88081bc62a24ae46a2697ea65781e4f440c072566f070d2d83c4a0187e917f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88081bc62a24ae46a2697ea65781e4f440c072566f070d2d83c4a0187e917f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af20c7c89382f6254080be3c1370d04f6e0362d8d3db202a02f9a0c3d58d04d"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af20c7c89382f6254080be3c1370d04f6e0362d8d3db202a02f9a0c3d58d04d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7af20c7c89382f6254080be3c1370d04f6e0362d8d3db202a02f9a0c3d58d04d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88081bc62a24ae46a2697ea65781e4f440c072566f070d2d83c4a0187e917f28"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af20c7c89382f6254080be3c1370d04f6e0362d8d3db202a02f9a0c3d58d04d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88081bc62a24ae46a2697ea65781e4f440c072566f070d2d83c4a0187e917f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af20c7c89382f6254080be3c1370d04f6e0362d8d3db202a02f9a0c3d58d04d"}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af20c7c89382f6254080be3c1370d04f6e0362d8d3db202a02f9a0c3d58d04d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:12:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"}
{"level":"info","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a66ca712-ea27-49d0-a365-21bf7c8e56d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48168","PortSpecifier":{"PortValue":48168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a66ca712-ea27-49d0-a365-21bf7c8e56d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a66ca712-ea27-49d0-a365-21bf7c8e56d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48168","PortSpecifier":{"PortValue":48168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067144,"nanos":129846843},"http":{"id":"a66ca712-ea27-49d0-a365-21bf7c8e56d2","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a66ca712-ea27-49d0-a365-21bf7c8e56d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a66ca712-ea27-49d0-a365-21bf7c8e56d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a66ca712-ea27-49d0-a365-21bf7c8e56d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a66ca712-ea27-49d0-a365-21bf7c8e56d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a66ca712-ea27-49d0-a365-21bf7c8e56d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a66ca712-ea27-49d0-a365-21bf7c8e56d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/auth-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a66ca712-ea27-49d0-a365-21bf7c8e56d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a66ca712-ea27-49d0-a365-21bf7c8e56d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a66ca712-ea27-49d0-a365-21bf7c8e56d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a66ca712-ea27-49d0-a365-21bf7c8e56d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a66ca712-ea27-49d0-a365-21bf7c8e56d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"804a09dc-6060-4602-acc8-457e7aba3ee0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37802","PortSpecifier":{"PortValue":37802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"804a09dc-6060-4602-acc8-457e7aba3ee0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"804a09dc-6060-4602-acc8-457e7aba3ee0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37802","PortSpecifier":{"PortValue":37802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067144,"nanos":187808976},"http":{"id":"804a09dc-6060-4602-acc8-457e7aba3ee0","method":"POST","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"804a09dc-6060-4602-acc8-457e7aba3ee0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"804a09dc-6060-4602-acc8-457e7aba3ee0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"804a09dc-6060-4602-acc8-457e7aba3ee0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"804a09dc-6060-4602-acc8-457e7aba3ee0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"804a09dc-6060-4602-acc8-457e7aba3ee0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"804a09dc-6060-4602-acc8-457e7aba3ee0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e98c02/auth-test-model-e98c02\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"804a09dc-6060-4602-acc8-457e7aba3ee0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"804a09dc-6060-4602-acc8-457e7aba3ee0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"804a09dc-6060-4602-acc8-457e7aba3ee0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"804a09dc-6060-4602-acc8-457e7aba3ee0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"804a09dc-6060-4602-acc8-457e7aba3ee0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ccbc497-856c-499d-b8ed-9f0f01656d12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48180","PortSpecifier":{"PortValue":48180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ccbc497-856c-499d-b8ed-9f0f01656d12","method":"GET","path":"/maas-api/v1/api-keys/5fd4f883-27a8-49fe-8f30-db8c72151eb6","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ccbc497-856c-499d-b8ed-9f0f01656d12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48180","PortSpecifier":{"PortValue":48180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067144,"nanos":272087702},"http":{"id":"5ccbc497-856c-499d-b8ed-9f0f01656d12","method":"GET","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5fd4f883-27a8-49fe-8f30-db8c72151eb6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ccbc497-856c-499d-b8ed-9f0f01656d12","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ccbc497-856c-499d-b8ed-9f0f01656d12","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ccbc497-856c-499d-b8ed-9f0f01656d12","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5fd4f883-27a8-49fe-8f30-db8c72151eb6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccbc497-856c-499d-b8ed-9f0f01656d12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccbc497-856c-499d-b8ed-9f0f01656d12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ccbc497-856c-499d-b8ed-9f0f01656d12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/auth-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ccbc497-856c-499d-b8ed-9f0f01656d12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccbc497-856c-499d-b8ed-9f0f01656d12","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ccbc497-856c-499d-b8ed-9f0f01656d12","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ccbc497-856c-499d-b8ed-9f0f01656d12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ccbc497-856c-499d-b8ed-9f0f01656d12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b148fa7-28a4-430e-a83a-1b04240ad3da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37814","PortSpecifier":{"PortValue":37814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b148fa7-28a4-430e-a83a-1b04240ad3da","method":"GET","path":"/maas-api/v1/api-keys/14f21172-2ba5-4184-aeab-f82017b98db0","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b148fa7-28a4-430e-a83a-1b04240ad3da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37814","PortSpecifier":{"PortValue":37814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067144,"nanos":310185548},"http":{"id":"9b148fa7-28a4-430e-a83a-1b04240ad3da","method":"GET","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/14f21172-2ba5-4184-aeab-f82017b98db0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b148fa7-28a4-430e-a83a-1b04240ad3da","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b148fa7-28a4-430e-a83a-1b04240ad3da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b148fa7-28a4-430e-a83a-1b04240ad3da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/14f21172-2ba5-4184-aeab-f82017b98db0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b148fa7-28a4-430e-a83a-1b04240ad3da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b148fa7-28a4-430e-a83a-1b04240ad3da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b148fa7-28a4-430e-a83a-1b04240ad3da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e98c02/auth-test-model-e98c02\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b148fa7-28a4-430e-a83a-1b04240ad3da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b148fa7-28a4-430e-a83a-1b04240ad3da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b148fa7-28a4-430e-a83a-1b04240ad3da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b148fa7-28a4-430e-a83a-1b04240ad3da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:12:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b148fa7-28a4-430e-a83a-1b04240ad3da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a602737c-cab9-45d1-a604-caaef80dd24c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57150","PortSpecifier":{"PortValue":57150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a602737c-cab9-45d1-a604-caaef80dd24c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a602737c-cab9-45d1-a604-caaef80dd24c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57150","PortSpecifier":{"PortValue":57150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067159,"nanos":582059890},"http":{"id":"a602737c-cab9-45d1-a604-caaef80dd24c","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a602737c-cab9-45d1-a604-caaef80dd24c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a602737c-cab9-45d1-a604-caaef80dd24c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a602737c-cab9-45d1-a604-caaef80dd24c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a602737c-cab9-45d1-a604-caaef80dd24c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a602737c-cab9-45d1-a604-caaef80dd24c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a602737c-cab9-45d1-a604-caaef80dd24c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/auth-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a602737c-cab9-45d1-a604-caaef80dd24c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a602737c-cab9-45d1-a604-caaef80dd24c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a602737c-cab9-45d1-a604-caaef80dd24c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a602737c-cab9-45d1-a604-caaef80dd24c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a602737c-cab9-45d1-a604-caaef80dd24c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dfa7734-c9c9-44a5-8cee-fb17682ecad0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42310","PortSpecifier":{"PortValue":42310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4dfa7734-c9c9-44a5-8cee-fb17682ecad0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dfa7734-c9c9-44a5-8cee-fb17682ecad0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42310","PortSpecifier":{"PortValue":42310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067159,"nanos":620171615},"http":{"id":"4dfa7734-c9c9-44a5-8cee-fb17682ecad0","method":"POST","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4dfa7734-c9c9-44a5-8cee-fb17682ecad0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4dfa7734-c9c9-44a5-8cee-fb17682ecad0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4dfa7734-c9c9-44a5-8cee-fb17682ecad0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dfa7734-c9c9-44a5-8cee-fb17682ecad0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dfa7734-c9c9-44a5-8cee-fb17682ecad0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dfa7734-c9c9-44a5-8cee-fb17682ecad0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e98c02/auth-test-model-e98c02\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4dfa7734-c9c9-44a5-8cee-fb17682ecad0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dfa7734-c9c9-44a5-8cee-fb17682ecad0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dfa7734-c9c9-44a5-8cee-fb17682ecad0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dfa7734-c9c9-44a5-8cee-fb17682ecad0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dfa7734-c9c9-44a5-8cee-fb17682ecad0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57164","PortSpecifier":{"PortValue":57164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57164","PortSpecifier":{"PortValue":57164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067159,"nanos":661758006},"http":{"id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","method":"GET","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2rHE64eIW5YmKIYw_1HccoJWbQO37K4zxxpziIavNufqDKMFP7JRaSX6USpn"}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2rHE64eIW5YmKIYw_1HccoJWbQO37K4zxxpziIavNufqDKMFP7JRaSX6USpn\"}"}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"678f3ba5-a27a-4a89-be53-9e097930e52c","keyName":"e2e-auth-iso-a-07ba0b","subscription":"e2e-auth-iso-d2bb48","tenant":"e2e-shared-a-e8c0aa","userId":"678f3ba5-a27a-4a89-be53-9e097930e52c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/auth-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d2bb48"}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:12:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cae42bf-b2d6-47ba-83ba-43d344af2653","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"109003ed-73e2-443c-8ddc-daed12bcbf46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40224","PortSpecifier":{"PortValue":40224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"109003ed-73e2-443c-8ddc-daed12bcbf46","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"109003ed-73e2-443c-8ddc-daed12bcbf46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40224","PortSpecifier":{"PortValue":40224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067177,"nanos":42696292},"http":{"id":"109003ed-73e2-443c-8ddc-daed12bcbf46","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"109003ed-73e2-443c-8ddc-daed12bcbf46","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"109003ed-73e2-443c-8ddc-daed12bcbf46","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"109003ed-73e2-443c-8ddc-daed12bcbf46","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"109003ed-73e2-443c-8ddc-daed12bcbf46","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"109003ed-73e2-443c-8ddc-daed12bcbf46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"109003ed-73e2-443c-8ddc-daed12bcbf46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/auth-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"109003ed-73e2-443c-8ddc-daed12bcbf46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"109003ed-73e2-443c-8ddc-daed12bcbf46","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"109003ed-73e2-443c-8ddc-daed12bcbf46","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"109003ed-73e2-443c-8ddc-daed12bcbf46","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"109003ed-73e2-443c-8ddc-daed12bcbf46","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0507c79-393c-4b6c-b151-a6097ecb2267","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55822","PortSpecifier":{"PortValue":55822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0507c79-393c-4b6c-b151-a6097ecb2267","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0507c79-393c-4b6c-b151-a6097ecb2267","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55822","PortSpecifier":{"PortValue":55822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067177,"nanos":77302490},"http":{"id":"f0507c79-393c-4b6c-b151-a6097ecb2267","method":"POST","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0507c79-393c-4b6c-b151-a6097ecb2267","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0507c79-393c-4b6c-b151-a6097ecb2267","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0507c79-393c-4b6c-b151-a6097ecb2267","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0507c79-393c-4b6c-b151-a6097ecb2267","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0507c79-393c-4b6c-b151-a6097ecb2267","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0507c79-393c-4b6c-b151-a6097ecb2267","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e98c02/auth-test-model-e98c02\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0507c79-393c-4b6c-b151-a6097ecb2267","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0507c79-393c-4b6c-b151-a6097ecb2267","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0507c79-393c-4b6c-b151-a6097ecb2267","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0507c79-393c-4b6c-b151-a6097ecb2267","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0507c79-393c-4b6c-b151-a6097ecb2267","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4bbc33b-14ea-47ca-b94d-f6275576b154","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55826","PortSpecifier":{"PortValue":55826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4bbc33b-14ea-47ca-b94d-f6275576b154","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4bbc33b-14ea-47ca-b94d-f6275576b154","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55826","PortSpecifier":{"PortValue":55826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067177,"nanos":119906721},"http":{"id":"a4bbc33b-14ea-47ca-b94d-f6275576b154","method":"GET","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4bbc33b-14ea-47ca-b94d-f6275576b154","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1pgH2ZWf5PkZ63bz_U5jvxPjMq4hVrju54UO3Un7WPayZl22bnP7mAeFYHgz"}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4bbc33b-14ea-47ca-b94d-f6275576b154","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e98c02.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1pgH2ZWf5PkZ63bz_U5jvxPjMq4hVrju54UO3Un7WPayZl22bnP7mAeFYHgz\"}"}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4bbc33b-14ea-47ca-b94d-f6275576b154","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e98c02.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4bbc33b-14ea-47ca-b94d-f6275576b154","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4bbc33b-14ea-47ca-b94d-f6275576b154","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a4bbc33b-14ea-47ca-b94d-f6275576b154","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4bbc33b-14ea-47ca-b94d-f6275576b154","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-14T22:12:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4bbc33b-14ea-47ca-b94d-f6275576b154","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b92a1674-a59c-406d-92f8-b5ecca1820b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55292","PortSpecifier":{"PortValue":55292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b92a1674-a59c-406d-92f8-b5ecca1820b8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b92a1674-a59c-406d-92f8-b5ecca1820b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55292","PortSpecifier":{"PortValue":55292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067192,"nanos":353099250},"http":{"id":"b92a1674-a59c-406d-92f8-b5ecca1820b8","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b92a1674-a59c-406d-92f8-b5ecca1820b8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b92a1674-a59c-406d-92f8-b5ecca1820b8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b92a1674-a59c-406d-92f8-b5ecca1820b8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b92a1674-a59c-406d-92f8-b5ecca1820b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b92a1674-a59c-406d-92f8-b5ecca1820b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b92a1674-a59c-406d-92f8-b5ecca1820b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/auth-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b92a1674-a59c-406d-92f8-b5ecca1820b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b92a1674-a59c-406d-92f8-b5ecca1820b8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b92a1674-a59c-406d-92f8-b5ecca1820b8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b92a1674-a59c-406d-92f8-b5ecca1820b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b92a1674-a59c-406d-92f8-b5ecca1820b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7a4af72-2ba1-4af6-baa8-803b3f60f91e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47958","PortSpecifier":{"PortValue":47958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7a4af72-2ba1-4af6-baa8-803b3f60f91e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7a4af72-2ba1-4af6-baa8-803b3f60f91e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47958","PortSpecifier":{"PortValue":47958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067192,"nanos":392439788},"http":{"id":"c7a4af72-2ba1-4af6-baa8-803b3f60f91e","method":"POST","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c7a4af72-2ba1-4af6-baa8-803b3f60f91e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7a4af72-2ba1-4af6-baa8-803b3f60f91e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7a4af72-2ba1-4af6-baa8-803b3f60f91e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7a4af72-2ba1-4af6-baa8-803b3f60f91e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7a4af72-2ba1-4af6-baa8-803b3f60f91e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7a4af72-2ba1-4af6-baa8-803b3f60f91e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e98c02/auth-test-model-e98c02\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7a4af72-2ba1-4af6-baa8-803b3f60f91e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7a4af72-2ba1-4af6-baa8-803b3f60f91e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7a4af72-2ba1-4af6-baa8-803b3f60f91e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7a4af72-2ba1-4af6-baa8-803b3f60f91e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7a4af72-2ba1-4af6-baa8-803b3f60f91e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d201f303-112e-48fa-9fb6-5329c124481a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55302","PortSpecifier":{"PortValue":55302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d201f303-112e-48fa-9fb6-5329c124481a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d201f303-112e-48fa-9fb6-5329c124481a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55302","PortSpecifier":{"PortValue":55302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067192,"nanos":433743211},"http":{"id":"d201f303-112e-48fa-9fb6-5329c124481a","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d201f303-112e-48fa-9fb6-5329c124481a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d201f303-112e-48fa-9fb6-5329c124481a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d201f303-112e-48fa-9fb6-5329c124481a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d201f303-112e-48fa-9fb6-5329c124481a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d201f303-112e-48fa-9fb6-5329c124481a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d201f303-112e-48fa-9fb6-5329c124481a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/auth-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d201f303-112e-48fa-9fb6-5329c124481a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d201f303-112e-48fa-9fb6-5329c124481a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d201f303-112e-48fa-9fb6-5329c124481a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d201f303-112e-48fa-9fb6-5329c124481a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d201f303-112e-48fa-9fb6-5329c124481a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93b45a6b-ea37-472b-8357-2faeb092a6e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47974","PortSpecifier":{"PortValue":47974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93b45a6b-ea37-472b-8357-2faeb092a6e1","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93b45a6b-ea37-472b-8357-2faeb092a6e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47974","PortSpecifier":{"PortValue":47974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067192,"nanos":471130477},"http":{"id":"93b45a6b-ea37-472b-8357-2faeb092a6e1","method":"POST","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"93b45a6b-ea37-472b-8357-2faeb092a6e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93b45a6b-ea37-472b-8357-2faeb092a6e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93b45a6b-ea37-472b-8357-2faeb092a6e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93b45a6b-ea37-472b-8357-2faeb092a6e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93b45a6b-ea37-472b-8357-2faeb092a6e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93b45a6b-ea37-472b-8357-2faeb092a6e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e98c02/auth-test-model-e98c02\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93b45a6b-ea37-472b-8357-2faeb092a6e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93b45a6b-ea37-472b-8357-2faeb092a6e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93b45a6b-ea37-472b-8357-2faeb092a6e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93b45a6b-ea37-472b-8357-2faeb092a6e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:13:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93b45a6b-ea37-472b-8357-2faeb092a6e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3141b06c-6545-4186-bcd8-642f2a762102","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53362","PortSpecifier":{"PortValue":53362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3141b06c-6545-4186-bcd8-642f2a762102","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3141b06c-6545-4186-bcd8-642f2a762102","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53362","PortSpecifier":{"PortValue":53362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067212,"nanos":855603073},"http":{"id":"3141b06c-6545-4186-bcd8-642f2a762102","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3141b06c-6545-4186-bcd8-642f2a762102","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3141b06c-6545-4186-bcd8-642f2a762102","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3141b06c-6545-4186-bcd8-642f2a762102","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3141b06c-6545-4186-bcd8-642f2a762102","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3141b06c-6545-4186-bcd8-642f2a762102","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3141b06c-6545-4186-bcd8-642f2a762102","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/auth-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3141b06c-6545-4186-bcd8-642f2a762102","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3141b06c-6545-4186-bcd8-642f2a762102","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3141b06c-6545-4186-bcd8-642f2a762102","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3141b06c-6545-4186-bcd8-642f2a762102","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3141b06c-6545-4186-bcd8-642f2a762102","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2cbc1ff-8c5a-47db-bd81-729c5cd2c399","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59516","PortSpecifier":{"PortValue":59516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2cbc1ff-8c5a-47db-bd81-729c5cd2c399","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2cbc1ff-8c5a-47db-bd81-729c5cd2c399","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59516","PortSpecifier":{"PortValue":59516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067212,"nanos":891669388},"http":{"id":"b2cbc1ff-8c5a-47db-bd81-729c5cd2c399","method":"POST","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b2cbc1ff-8c5a-47db-bd81-729c5cd2c399","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2cbc1ff-8c5a-47db-bd81-729c5cd2c399","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2cbc1ff-8c5a-47db-bd81-729c5cd2c399","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2cbc1ff-8c5a-47db-bd81-729c5cd2c399","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2cbc1ff-8c5a-47db-bd81-729c5cd2c399","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2cbc1ff-8c5a-47db-bd81-729c5cd2c399","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e98c02/auth-test-model-e98c02\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2cbc1ff-8c5a-47db-bd81-729c5cd2c399","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2cbc1ff-8c5a-47db-bd81-729c5cd2c399","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2cbc1ff-8c5a-47db-bd81-729c5cd2c399","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2cbc1ff-8c5a-47db-bd81-729c5cd2c399","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2cbc1ff-8c5a-47db-bd81-729c5cd2c399","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbc16767-c344-40a2-b1d3-23209351465d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59526","PortSpecifier":{"PortValue":59526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbc16767-c344-40a2-b1d3-23209351465d","method":"GET","path":"/maas-api/v1/api-keys/d5dbfb10-3684-4e59-a1cf-d1e6983085ce","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbc16767-c344-40a2-b1d3-23209351465d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59526","PortSpecifier":{"PortValue":59526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067212,"nanos":930296164},"http":{"id":"fbc16767-c344-40a2-b1d3-23209351465d","method":"GET","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d5dbfb10-3684-4e59-a1cf-d1e6983085ce",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fbc16767-c344-40a2-b1d3-23209351465d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbc16767-c344-40a2-b1d3-23209351465d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbc16767-c344-40a2-b1d3-23209351465d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d5dbfb10-3684-4e59-a1cf-d1e6983085ce",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc16767-c344-40a2-b1d3-23209351465d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc16767-c344-40a2-b1d3-23209351465d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc16767-c344-40a2-b1d3-23209351465d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e98c02/auth-test-model-e98c02\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbc16767-c344-40a2-b1d3-23209351465d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbc16767-c344-40a2-b1d3-23209351465d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbc16767-c344-40a2-b1d3-23209351465d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbc16767-c344-40a2-b1d3-23209351465d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbc16767-c344-40a2-b1d3-23209351465d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4822ea86-5899-4fa0-8bad-3d3141db9e8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53374","PortSpecifier":{"PortValue":53374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4822ea86-5899-4fa0-8bad-3d3141db9e8e","method":"GET","path":"/maas-api/v1/api-keys/d5dbfb10-3684-4e59-a1cf-d1e6983085ce","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4822ea86-5899-4fa0-8bad-3d3141db9e8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53374","PortSpecifier":{"PortValue":53374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067212,"nanos":964964710},"http":{"id":"4822ea86-5899-4fa0-8bad-3d3141db9e8e","method":"GET","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d5dbfb10-3684-4e59-a1cf-d1e6983085ce",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4822ea86-5899-4fa0-8bad-3d3141db9e8e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4822ea86-5899-4fa0-8bad-3d3141db9e8e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4822ea86-5899-4fa0-8bad-3d3141db9e8e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d5dbfb10-3684-4e59-a1cf-d1e6983085ce",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4822ea86-5899-4fa0-8bad-3d3141db9e8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4822ea86-5899-4fa0-8bad-3d3141db9e8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4822ea86-5899-4fa0-8bad-3d3141db9e8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/auth-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4822ea86-5899-4fa0-8bad-3d3141db9e8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4822ea86-5899-4fa0-8bad-3d3141db9e8e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4822ea86-5899-4fa0-8bad-3d3141db9e8e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4822ea86-5899-4fa0-8bad-3d3141db9e8e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4822ea86-5899-4fa0-8bad-3d3141db9e8e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f7935fb-3324-458c-b8ad-5ff43845e00d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34920","PortSpecifier":{"PortValue":34920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f7935fb-3324-458c-b8ad-5ff43845e00d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f7935fb-3324-458c-b8ad-5ff43845e00d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34920","PortSpecifier":{"PortValue":34920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067230,"nanos":317879221},"http":{"id":"6f7935fb-3324-458c-b8ad-5ff43845e00d","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f7935fb-3324-458c-b8ad-5ff43845e00d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f7935fb-3324-458c-b8ad-5ff43845e00d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f7935fb-3324-458c-b8ad-5ff43845e00d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f7935fb-3324-458c-b8ad-5ff43845e00d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f7935fb-3324-458c-b8ad-5ff43845e00d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f7935fb-3324-458c-b8ad-5ff43845e00d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/auth-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f7935fb-3324-458c-b8ad-5ff43845e00d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f7935fb-3324-458c-b8ad-5ff43845e00d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f7935fb-3324-458c-b8ad-5ff43845e00d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f7935fb-3324-458c-b8ad-5ff43845e00d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f7935fb-3324-458c-b8ad-5ff43845e00d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b55c6d9f-4de0-4ae4-a2c2-548a4d8197e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60046","PortSpecifier":{"PortValue":60046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b55c6d9f-4de0-4ae4-a2c2-548a4d8197e5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b55c6d9f-4de0-4ae4-a2c2-548a4d8197e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60046","PortSpecifier":{"PortValue":60046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067230,"nanos":354752828},"http":{"id":"b55c6d9f-4de0-4ae4-a2c2-548a4d8197e5","method":"POST","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b55c6d9f-4de0-4ae4-a2c2-548a4d8197e5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b55c6d9f-4de0-4ae4-a2c2-548a4d8197e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b55c6d9f-4de0-4ae4-a2c2-548a4d8197e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b55c6d9f-4de0-4ae4-a2c2-548a4d8197e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b55c6d9f-4de0-4ae4-a2c2-548a4d8197e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b55c6d9f-4de0-4ae4-a2c2-548a4d8197e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e98c02/auth-test-model-e98c02\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b55c6d9f-4de0-4ae4-a2c2-548a4d8197e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b55c6d9f-4de0-4ae4-a2c2-548a4d8197e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b55c6d9f-4de0-4ae4-a2c2-548a4d8197e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b55c6d9f-4de0-4ae4-a2c2-548a4d8197e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b55c6d9f-4de0-4ae4-a2c2-548a4d8197e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34932","PortSpecifier":{"PortValue":34932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34932","PortSpecifier":{"PortValue":34932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067230,"nanos":389684799},"http":{"id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-b8iwgglbbD5r6Ol9_WS3a2UDaGok7PBvSNDa4wDSI6QIhi5VwlglOKWzMIo1"}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-b8iwgglbbD5r6Ol9_WS3a2UDaGok7PBvSNDa4wDSI6QIhi5VwlglOKWzMIo1\"}"}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d3097fe9-0265-4813-8057-57025e41b6bf","keyName":"e2e-auth-iso-a-37b847","subscription":"e2e-auth-iso-5840dc","tenant":"e2e-shared-a-e8c0aa","userId":"d3097fe9-0265-4813-8057-57025e41b6bf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/auth-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-5840dc"}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:13:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33e56ac5-b1ad-4a30-83f7-a7f4bcd10d79","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fc00b74b82daeed31b50bafcbbd634e1eb3b07106fda0889a97308278ae5de3"}
{"level":"info","ts":"2026-07-14T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/933dd8b286995af41403381a1af6b0b93f24d315c3c9e62fcfff3a77f55ce8e2"}
{"level":"info","ts":"2026-07-14T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e755baacda472081da7457b09dd421717477c9b18a1ea2a440e92202de4b8cc"}
{"level":"info","ts":"2026-07-14T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e03c6fe2726398adc101480d90eee72ab9e39eafacc5abe2adf14ed014907968"}
{"level":"info","ts":"2026-07-14T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bdd4a1a2eb769e5180ab0b4fbdba5dff29bc89204fe8b3a8175fd1e1ef05c8a"}
{"level":"info","ts":"2026-07-14T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24de82abc5bf555b8ee7502f096fe51b6986ac0ee913bca2e7813f59ae25abea"}
{"level":"info","ts":"2026-07-14T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ba61ffcc3eb640d8862d819e2b2e9fbbc1a0b1e571c43f0c1a5c371941c1180"}
{"level":"info","ts":"2026-07-14T22:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd69d15d4395b85c5761d6cd36a6fa47215db61b0f5c2d850880b02eb59ecfa8"}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373"}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf"}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf"}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297874c4fcea825376393f09b1a562753f8b4bbcb734aca942a9fcb6dc0dfbb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297874c4fcea825376393f09b1a562753f8b4bbcb734aca942a9fcb6dc0dfbb8"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297874c4fcea825376393f09b1a562753f8b4bbcb734aca942a9fcb6dc0dfbb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297874c4fcea825376393f09b1a562753f8b4bbcb734aca942a9fcb6dc0dfbb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297874c4fcea825376393f09b1a562753f8b4bbcb734aca942a9fcb6dc0dfbb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297874c4fcea825376393f09b1a562753f8b4bbcb734aca942a9fcb6dc0dfbb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297874c4fcea825376393f09b1a562753f8b4bbcb734aca942a9fcb6dc0dfbb8"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297874c4fcea825376393f09b1a562753f8b4bbcb734aca942a9fcb6dc0dfbb8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf"}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297874c4fcea825376393f09b1a562753f8b4bbcb734aca942a9fcb6dc0dfbb8"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf"}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a"}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d04e0b67ac182556e161ac8218e380170a5c864473fbcaf253eb4ad076a1be0"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9be8f9fb89d2689b5cf90631587524c08a3f7db0266af27156cae1994ea67c7d"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88081bc62a24ae46a2697ea65781e4f440c072566f070d2d83c4a0187e917f28"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2be7c200f690cc47d714e0d014b4f6c47050ee0d39da32c5ba91797aa2c45a0"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7af20c7c89382f6254080be3c1370d04f6e0362d8d3db202a02f9a0c3d58d04d"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7df536e67b295942e5d22d972b9b94bbe051071bdddbb72a23f3d317738af8cc"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2832eaeef61003796811397d8b9df2722c7cd9fe2c392ee5de6d7c45ac54542"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54e8f9a3defcef98eec98000e8acf3cf29a5793e5da3a27a4328d0ac50c03d7b"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5"}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed"}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed"}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed"}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dba5f42c6ba403e44b9a452b046a9fc265d516cf9755e46f159f11240020369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dba5f42c6ba403e44b9a452b046a9fc265d516cf9755e46f159f11240020369","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dba5f42c6ba403e44b9a452b046a9fc265d516cf9755e46f159f11240020369","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dba5f42c6ba403e44b9a452b046a9fc265d516cf9755e46f159f11240020369","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dba5f42c6ba403e44b9a452b046a9fc265d516cf9755e46f159f11240020369"}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dba5f42c6ba403e44b9a452b046a9fc265d516cf9755e46f159f11240020369","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dba5f42c6ba403e44b9a452b046a9fc265d516cf9755e46f159f11240020369"}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dba5f42c6ba403e44b9a452b046a9fc265d516cf9755e46f159f11240020369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dba5f42c6ba403e44b9a452b046a9fc265d516cf9755e46f159f11240020369"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dba5f42c6ba403e44b9a452b046a9fc265d516cf9755e46f159f11240020369","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dba5f42c6ba403e44b9a452b046a9fc265d516cf9755e46f159f11240020369","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dba5f42c6ba403e44b9a452b046a9fc265d516cf9755e46f159f11240020369"}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d"}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d"}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d"}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b"}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d"}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b"}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b"}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b"}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b046e317830b415b4932fae05b03a204c0da1b7dd88b3a198227616303d3802c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b046e317830b415b4932fae05b03a204c0da1b7dd88b3a198227616303d3802c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b046e317830b415b4932fae05b03a204c0da1b7dd88b3a198227616303d3802c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b046e317830b415b4932fae05b03a204c0da1b7dd88b3a198227616303d3802c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b046e317830b415b4932fae05b03a204c0da1b7dd88b3a198227616303d3802c"}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b046e317830b415b4932fae05b03a204c0da1b7dd88b3a198227616303d3802c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b046e317830b415b4932fae05b03a204c0da1b7dd88b3a198227616303d3802c"}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b046e317830b415b4932fae05b03a204c0da1b7dd88b3a198227616303d3802c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b046e317830b415b4932fae05b03a204c0da1b7dd88b3a198227616303d3802c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b046e317830b415b4932fae05b03a204c0da1b7dd88b3a198227616303d3802c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b046e317830b415b4932fae05b03a204c0da1b7dd88b3a198227616303d3802c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3"}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b046e317830b415b4932fae05b03a204c0da1b7dd88b3a198227616303d3802c"}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3"}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3"}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3"}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3"}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fcbd44e2307aee5beccc537e425c09080feb74076db1f398da642b2fd4d5ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3"}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fcbd44e2307aee5beccc537e425c09080feb74076db1f398da642b2fd4d5ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fcbd44e2307aee5beccc537e425c09080feb74076db1f398da642b2fd4d5ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fcbd44e2307aee5beccc537e425c09080feb74076db1f398da642b2fd4d5ef8"}
{"level":"info","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fcbd44e2307aee5beccc537e425c09080feb74076db1f398da642b2fd4d5ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fcbd44e2307aee5beccc537e425c09080feb74076db1f398da642b2fd4d5ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fcbd44e2307aee5beccc537e425c09080feb74076db1f398da642b2fd4d5ef8"}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fcbd44e2307aee5beccc537e425c09080feb74076db1f398da642b2fd4d5ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fcbd44e2307aee5beccc537e425c09080feb74076db1f398da642b2fd4d5ef8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fcbd44e2307aee5beccc537e425c09080feb74076db1f398da642b2fd4d5ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fcbd44e2307aee5beccc537e425c09080feb74076db1f398da642b2fd4d5ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3"}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fcbd44e2307aee5beccc537e425c09080feb74076db1f398da642b2fd4d5ef8"}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603"}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603"}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603"}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"}
{"level":"info","ts":"2026-07-14T22:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603"}
{"level":"debug","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5"}
{"level":"debug","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5"}
{"level":"debug","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5"}
{"level":"debug","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"}
{"level":"debug","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"}
{"level":"debug","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"}
{"level":"info","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf"}
{"level":"debug","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3"}
{"level":"debug","ts":"2026-07-14T22:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3"}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603"}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3"}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed"}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373"}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fcbd44e2307aee5beccc537e425c09080feb74076db1f398da642b2fd4d5ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dba5f42c6ba403e44b9a452b046a9fc265d516cf9755e46f159f11240020369","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fcbd44e2307aee5beccc537e425c09080feb74076db1f398da642b2fd4d5ef8"}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dba5f42c6ba403e44b9a452b046a9fc265d516cf9755e46f159f11240020369"}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e"}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297874c4fcea825376393f09b1a562753f8b4bbcb734aca942a9fcb6dc0dfbb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:14:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a"}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297874c4fcea825376393f09b1a562753f8b4bbcb734aca942a9fcb6dc0dfbb8"}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476"}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b046e317830b415b4932fae05b03a204c0da1b7dd88b3a198227616303d3802c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b"}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b046e317830b415b4932fae05b03a204c0da1b7dd88b3a198227616303d3802c"}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec"}
{"level":"info","ts":"2026-07-14T22:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d"}
{"level":"info","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c96f51ef-8686-45a5-bfc5-ad2d4c83c0fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53348","PortSpecifier":{"PortValue":53348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c96f51ef-8686-45a5-bfc5-ad2d4c83c0fa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c96f51ef-8686-45a5-bfc5-ad2d4c83c0fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53348","PortSpecifier":{"PortValue":53348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067299,"nanos":543873681},"http":{"id":"c96f51ef-8686-45a5-bfc5-ad2d4c83c0fa","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c96f51ef-8686-45a5-bfc5-ad2d4c83c0fa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c96f51ef-8686-45a5-bfc5-ad2d4c83c0fa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c96f51ef-8686-45a5-bfc5-ad2d4c83c0fa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c96f51ef-8686-45a5-bfc5-ad2d4c83c0fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c96f51ef-8686-45a5-bfc5-ad2d4c83c0fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c96f51ef-8686-45a5-bfc5-ad2d4c83c0fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/sub-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c96f51ef-8686-45a5-bfc5-ad2d4c83c0fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c96f51ef-8686-45a5-bfc5-ad2d4c83c0fa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c96f51ef-8686-45a5-bfc5-ad2d4c83c0fa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c96f51ef-8686-45a5-bfc5-ad2d4c83c0fa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c96f51ef-8686-45a5-bfc5-ad2d4c83c0fa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5b35c1b-594f-4ef2-ae7d-2b94cb9575b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40788","PortSpecifier":{"PortValue":40788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5b35c1b-594f-4ef2-ae7d-2b94cb9575b6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5b35c1b-594f-4ef2-ae7d-2b94cb9575b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40788","PortSpecifier":{"PortValue":40788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067299,"nanos":594524911},"http":{"id":"a5b35c1b-594f-4ef2-ae7d-2b94cb9575b6","method":"POST","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5b35c1b-594f-4ef2-ae7d-2b94cb9575b6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5b35c1b-594f-4ef2-ae7d-2b94cb9575b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5b35c1b-594f-4ef2-ae7d-2b94cb9575b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5b35c1b-594f-4ef2-ae7d-2b94cb9575b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5b35c1b-594f-4ef2-ae7d-2b94cb9575b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5b35c1b-594f-4ef2-ae7d-2b94cb9575b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e98c02/sub-test-model-e98c02\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5b35c1b-594f-4ef2-ae7d-2b94cb9575b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5b35c1b-594f-4ef2-ae7d-2b94cb9575b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5b35c1b-594f-4ef2-ae7d-2b94cb9575b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5b35c1b-594f-4ef2-ae7d-2b94cb9575b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5b35c1b-594f-4ef2-ae7d-2b94cb9575b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5513350-5996-4897-a720-0ea10c8e8de6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53356","PortSpecifier":{"PortValue":53356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5513350-5996-4897-a720-0ea10c8e8de6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5513350-5996-4897-a720-0ea10c8e8de6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53356","PortSpecifier":{"PortValue":53356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067299,"nanos":632392022},"http":{"id":"e5513350-5996-4897-a720-0ea10c8e8de6","method":"GET","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5513350-5996-4897-a720-0ea10c8e8de6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gOwHRquLDQ6qndNy_XBwEu6qHSjn4LMlCkVL9SsEMJ6luCJVJOFpXlBC2h6q"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5513350-5996-4897-a720-0ea10c8e8de6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gOwHRquLDQ6qndNy_XBwEu6qHSjn4LMlCkVL9SsEMJ6luCJVJOFpXlBC2h6q\"}"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5513350-5996-4897-a720-0ea10c8e8de6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1653c925-e76e-4f61-971f-2f0bd4f089ae","keyName":"e2e-sub-iso-9f83d4","subscription":"e2e-a-only-6d1195","tenant":"e2e-shared-a-e8c0aa","userId":"1653c925-e76e-4f61-971f-2f0bd4f089ae","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5513350-5996-4897-a720-0ea10c8e8de6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5513350-5996-4897-a720-0ea10c8e8de6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5513350-5996-4897-a720-0ea10c8e8de6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5513350-5996-4897-a720-0ea10c8e8de6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/sub-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e5513350-5996-4897-a720-0ea10c8e8de6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5513350-5996-4897-a720-0ea10c8e8de6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5513350-5996-4897-a720-0ea10c8e8de6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-6d1195"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5513350-5996-4897-a720-0ea10c8e8de6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5513350-5996-4897-a720-0ea10c8e8de6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5513350-5996-4897-a720-0ea10c8e8de6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94addead-0738-46e0-b1e4-a6f12856cd30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40792","PortSpecifier":{"PortValue":40792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94addead-0738-46e0-b1e4-a6f12856cd30","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94addead-0738-46e0-b1e4-a6f12856cd30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40792","PortSpecifier":{"PortValue":40792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067299,"nanos":674459176},"http":{"id":"94addead-0738-46e0-b1e4-a6f12856cd30","method":"GET","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94addead-0738-46e0-b1e4-a6f12856cd30","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xD5awj6Oz3ypKWTi_UExl8HDIe7a40mAia0qUgzL05Mm9qfRg4yUaQCmSsrG"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"94addead-0738-46e0-b1e4-a6f12856cd30","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e98c02.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xD5awj6Oz3ypKWTi_UExl8HDIe7a40mAia0qUgzL05Mm9qfRg4yUaQCmSsrG\"}"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"94addead-0738-46e0-b1e4-a6f12856cd30","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e98c02.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d87a4050-e934-4664-9e06-81163cb113e5","keyName":"e2e-sub-iso-71a661","subscription":"e2e-b-only-6d1195","tenant":"e2e-shared-b-e98c02","userId":"d87a4050-e934-4664-9e06-81163cb113e5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94addead-0738-46e0-b1e4-a6f12856cd30","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94addead-0738-46e0-b1e4-a6f12856cd30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94addead-0738-46e0-b1e4-a6f12856cd30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94addead-0738-46e0-b1e4-a6f12856cd30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e98c02/sub-test-model-e98c02\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94addead-0738-46e0-b1e4-a6f12856cd30","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94addead-0738-46e0-b1e4-a6f12856cd30","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-6d1195"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94addead-0738-46e0-b1e4-a6f12856cd30","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94addead-0738-46e0-b1e4-a6f12856cd30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94addead-0738-46e0-b1e4-a6f12856cd30","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94addead-0738-46e0-b1e4-a6f12856cd30","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"604a946a-fa90-4806-8a1d-7678609b061b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34716","PortSpecifier":{"PortValue":34716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"604a946a-fa90-4806-8a1d-7678609b061b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"604a946a-fa90-4806-8a1d-7678609b061b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34716","PortSpecifier":{"PortValue":34716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067316,"nanos":276037486},"http":{"id":"604a946a-fa90-4806-8a1d-7678609b061b","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"604a946a-fa90-4806-8a1d-7678609b061b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"604a946a-fa90-4806-8a1d-7678609b061b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"604a946a-fa90-4806-8a1d-7678609b061b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604a946a-fa90-4806-8a1d-7678609b061b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604a946a-fa90-4806-8a1d-7678609b061b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604a946a-fa90-4806-8a1d-7678609b061b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/sub-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"604a946a-fa90-4806-8a1d-7678609b061b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"604a946a-fa90-4806-8a1d-7678609b061b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"604a946a-fa90-4806-8a1d-7678609b061b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"604a946a-fa90-4806-8a1d-7678609b061b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"604a946a-fa90-4806-8a1d-7678609b061b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c60e67b-5a3f-472b-ae5e-8e393a777718","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40232","PortSpecifier":{"PortValue":40232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c60e67b-5a3f-472b-ae5e-8e393a777718","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c60e67b-5a3f-472b-ae5e-8e393a777718","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40232","PortSpecifier":{"PortValue":40232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067316,"nanos":317957278},"http":{"id":"4c60e67b-5a3f-472b-ae5e-8e393a777718","method":"POST","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c60e67b-5a3f-472b-ae5e-8e393a777718","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c60e67b-5a3f-472b-ae5e-8e393a777718","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c60e67b-5a3f-472b-ae5e-8e393a777718","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c60e67b-5a3f-472b-ae5e-8e393a777718","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c60e67b-5a3f-472b-ae5e-8e393a777718","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c60e67b-5a3f-472b-ae5e-8e393a777718","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e98c02/sub-test-model-e98c02\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c60e67b-5a3f-472b-ae5e-8e393a777718","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c60e67b-5a3f-472b-ae5e-8e393a777718","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c60e67b-5a3f-472b-ae5e-8e393a777718","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c60e67b-5a3f-472b-ae5e-8e393a777718","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c60e67b-5a3f-472b-ae5e-8e393a777718","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34724","PortSpecifier":{"PortValue":34724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34724","PortSpecifier":{"PortValue":34724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067316,"nanos":352355907},"http":{"id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1POssU8Udux7pbT3s_tn9dM7MiBoQaxLD2SfLr7gUvjLkJm0nBWDARAMrxKS3"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1POssU8Udux7pbT3s_tn9dM7MiBoQaxLD2SfLr7gUvjLkJm0nBWDARAMrxKS3\"}"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"42cd2b11-44e1-4dfa-9683-e1d40a3ba5ac","keyName":"e2e-sub-iso-5f0823","subscription":"e2e-shared-sub-07ea7d","tenant":"e2e-shared-a-e8c0aa","userId":"42cd2b11-44e1-4dfa-9683-e1d40a3ba5ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/sub-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-07ea7d"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5c8f88b-332f-4679-962e-4a21b6d632b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40236","PortSpecifier":{"PortValue":40236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40236","PortSpecifier":{"PortValue":40236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067316,"nanos":382368562},"http":{"id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","method":"POST","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CN5gCLouWv9mphcy_YmSJtbz5XU9CVovnjgHpH8OtrXPxLQtezWDSFN76mFb"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e98c02.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CN5gCLouWv9mphcy_YmSJtbz5XU9CVovnjgHpH8OtrXPxLQtezWDSFN76mFb\"}"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e98c02.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"71475415-d32d-4a0b-90d6-9b88ea19417e","keyName":"e2e-sub-iso-a6184a","subscription":"e2e-shared-sub-07ea7d","tenant":"e2e-shared-b-e98c02","userId":"71475415-d32d-4a0b-90d6-9b88ea19417e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e98c02/sub-test-model-e98c02\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-07ea7d"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:15:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66f34997-0e18-42e3-922c-e6d0ff8612c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c18157000c5c9d3985dcd329cb9bc9cff1a56778ebb9ff76c7e3dfa48a5b4e3"}
{"level":"info","ts":"2026-07-14T22:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb631dca4108fea4c8c52768aeddb78ed18cfe2cf81bd76b64e6b665daa445ed"}
{"level":"info","ts":"2026-07-14T22:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba2915674bb344afe6cce3ce1810bfe69af4cd7e46aaefb615cc70201b449373"}
{"level":"info","ts":"2026-07-14T22:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80a4027a9ee4908c3d5ed55d04427e0e775523ed446d60a19acdd45b1bba3603"}
{"level":"info","ts":"2026-07-14T22:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9151b93696a65ee89a3947cd6eca8e389424414572d373366ec29b270870adf"}
{"level":"info","ts":"2026-07-14T22:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/654a5359c3f65fee9a2713e71413feb6a59a7e5a2aeb57bac40865d7673d2a9a"}
{"level":"info","ts":"2026-07-14T22:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63e5df0a2865d5eddfdc4b366d69e2ff8edc9dc5dcda555301128bce5af09970"}
{"level":"info","ts":"2026-07-14T22:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/756dc65fa716dfd5035185f2d9dced0eb5e72b74a63d3478a606c2b08565ee78"}
{"level":"info","ts":"2026-07-14T22:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b046e317830b415b4932fae05b03a204c0da1b7dd88b3a198227616303d3802c"}
{"level":"info","ts":"2026-07-14T22:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a41d37e0716f1832578e304104f11b2504ac7bc3fcb4413ce502986c4c4d286d"}
{"level":"info","ts":"2026-07-14T22:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/297874c4fcea825376393f09b1a562753f8b4bbcb734aca942a9fcb6dc0dfbb8"}
{"level":"info","ts":"2026-07-14T22:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8db6b7ac8150d1654f2eb0d001c4be055177d41039b39f71a2f294f71ff61b2b"}
{"level":"info","ts":"2026-07-14T22:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dde950e6f3d609a5c02db8551487afa5d0a06e9963d7d402f77bcf27fd46a476"}
{"level":"info","ts":"2026-07-14T22:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adba9d05bfc769bf207a4f8c5504dfe551d3de9fc0589667f244fa17d56155f5"}
{"level":"info","ts":"2026-07-14T22:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dba5f42c6ba403e44b9a452b046a9fc265d516cf9755e46f159f11240020369"}
{"level":"info","ts":"2026-07-14T22:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fcbd44e2307aee5beccc537e425c09080feb74076db1f398da642b2fd4d5ef8"}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0"}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0"}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0"}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0"}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"}
{"level":"error","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0"}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3664a9fb9db07018b502bde233e98b57ff6e4c1a319f8368208dc06211d6841f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3664a9fb9db07018b502bde233e98b57ff6e4c1a319f8368208dc06211d6841f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0"}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3664a9fb9db07018b502bde233e98b57ff6e4c1a319f8368208dc06211d6841f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3664a9fb9db07018b502bde233e98b57ff6e4c1a319f8368208dc06211d6841f"}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3664a9fb9db07018b502bde233e98b57ff6e4c1a319f8368208dc06211d6841f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3664a9fb9db07018b502bde233e98b57ff6e4c1a319f8368208dc06211d6841f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3664a9fb9db07018b502bde233e98b57ff6e4c1a319f8368208dc06211d6841f"}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3664a9fb9db07018b502bde233e98b57ff6e4c1a319f8368208dc06211d6841f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3664a9fb9db07018b502bde233e98b57ff6e4c1a319f8368208dc06211d6841f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0"}
{"level":"info","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3664a9fb9db07018b502bde233e98b57ff6e4c1a319f8368208dc06211d6841f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3664a9fb9db07018b502bde233e98b57ff6e4c1a319f8368208dc06211d6841f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3664a9fb9db07018b502bde233e98b57ff6e4c1a319f8368208dc06211d6841f"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090"}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5805fab77e91f8715a4dd7a6ac1ef6d0a34885e83b512afc2b9a1d59a1605a80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5805fab77e91f8715a4dd7a6ac1ef6d0a34885e83b512afc2b9a1d59a1605a80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5805fab77e91f8715a4dd7a6ac1ef6d0a34885e83b512afc2b9a1d59a1605a80"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5805fab77e91f8715a4dd7a6ac1ef6d0a34885e83b512afc2b9a1d59a1605a80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5805fab77e91f8715a4dd7a6ac1ef6d0a34885e83b512afc2b9a1d59a1605a80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5805fab77e91f8715a4dd7a6ac1ef6d0a34885e83b512afc2b9a1d59a1605a80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5805fab77e91f8715a4dd7a6ac1ef6d0a34885e83b512afc2b9a1d59a1605a80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5805fab77e91f8715a4dd7a6ac1ef6d0a34885e83b512afc2b9a1d59a1605a80"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"error","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"debug","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"debug","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"debug","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"debug","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9"}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9"}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9"}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9"}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9"}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51"}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51"}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9"}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51"}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90"}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed"}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51"}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90"}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed"}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d"}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90"}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed"}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d"}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121"}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03"}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121"}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03"}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03"}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121"}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929"}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121"}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929"}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:15:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03"}
{"level":"error","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:15:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121"}
{"level":"info","ts":"2026-07-14T22:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929"}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d"}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d"}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090"}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d"}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090"}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5805fab77e91f8715a4dd7a6ac1ef6d0a34885e83b512afc2b9a1d59a1605a80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5805fab77e91f8715a4dd7a6ac1ef6d0a34885e83b512afc2b9a1d59a1605a80"}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9"}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e"}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec"}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec"}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec"}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90"}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90"}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9"}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90"}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9"}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3664a9fb9db07018b502bde233e98b57ff6e4c1a319f8368208dc06211d6841f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3664a9fb9db07018b502bde233e98b57ff6e4c1a319f8368208dc06211d6841f"}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0"}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed"}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51"}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03"}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"}
{"level":"debug","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929"}
{"level":"info","ts":"2026-07-14T22:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121"}
{"level":"info","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c63b4d9-767b-44db-95d9-4bd721044d18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34332","PortSpecifier":{"PortValue":34332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c63b4d9-767b-44db-95d9-4bd721044d18","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c63b4d9-767b-44db-95d9-4bd721044d18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34332","PortSpecifier":{"PortValue":34332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067395,"nanos":594286461},"http":{"id":"0c63b4d9-767b-44db-95d9-4bd721044d18","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c63b4d9-767b-44db-95d9-4bd721044d18","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c63b4d9-767b-44db-95d9-4bd721044d18","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c63b4d9-767b-44db-95d9-4bd721044d18","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c63b4d9-767b-44db-95d9-4bd721044d18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c63b4d9-767b-44db-95d9-4bd721044d18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c63b4d9-767b-44db-95d9-4bd721044d18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c63b4d9-767b-44db-95d9-4bd721044d18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c63b4d9-767b-44db-95d9-4bd721044d18","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c63b4d9-767b-44db-95d9-4bd721044d18","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c63b4d9-767b-44db-95d9-4bd721044d18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c63b4d9-767b-44db-95d9-4bd721044d18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6c9f47c-bab2-4f99-83af-ecbdcce23961","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46204","PortSpecifier":{"PortValue":46204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6c9f47c-bab2-4f99-83af-ecbdcce23961","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6c9f47c-bab2-4f99-83af-ecbdcce23961","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46204","PortSpecifier":{"PortValue":46204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067395,"nanos":636898642},"http":{"id":"a6c9f47c-bab2-4f99-83af-ecbdcce23961","method":"POST","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a6c9f47c-bab2-4f99-83af-ecbdcce23961","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6c9f47c-bab2-4f99-83af-ecbdcce23961","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6c9f47c-bab2-4f99-83af-ecbdcce23961","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6c9f47c-bab2-4f99-83af-ecbdcce23961","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6c9f47c-bab2-4f99-83af-ecbdcce23961","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6c9f47c-bab2-4f99-83af-ecbdcce23961","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e98c02/rate-test-model-e98c02\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a6c9f47c-bab2-4f99-83af-ecbdcce23961","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6c9f47c-bab2-4f99-83af-ecbdcce23961","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6c9f47c-bab2-4f99-83af-ecbdcce23961","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6c9f47c-bab2-4f99-83af-ecbdcce23961","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6c9f47c-bab2-4f99-83af-ecbdcce23961","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34348","PortSpecifier":{"PortValue":34348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"404e9c4e-776a-4d53-b7d8-dece611643cf","method":"POST","path":"/ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa/v1/completions","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34348","PortSpecifier":{"PortValue":34348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067395,"nanos":679632500},"http":{"id":"404e9c4e-776a-4d53-b7d8-dece611643cf","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8Wz6lpy1KqsNl7Ev_vUtc7ZA8fa93L2nNKClLCTZV0IHdpbcmEr7DO44hfZX"}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8Wz6lpy1KqsNl7Ev_vUtc7ZA8fa93L2nNKClLCTZV0IHdpbcmEr7DO44hfZX\"}"}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b35f4d5-07f0-4fe3-80fe-ed42cc42456c","keyName":"e2e-rate-a-ca4250","subscription":"e2e-rate-iso-a-ca4250","tenant":"e2e-shared-a-e8c0aa","userId":"7b35f4d5-07f0-4fe3-80fe-ed42cc42456c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa\",\"requestedSubscription\":\"e2e-rate-iso-a-ca4250\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e8c0aa","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca4250","namespace":"ai-tenant-e2e-shared-a-e8c0aa","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca4250"}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7b35f4d5-07f0-4fe3-80fe-ed42cc42456c","keyName":"e2e-rate-a-ca4250","selected_subscription":"e2e-rate-iso-a-ca4250","selected_subscription_key":"ai-tenant-e2e-shared-a-e8c0aa/e2e-rate-iso-a-ca4250@ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e8c0aa","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca4250","namespace":"ai-tenant-e2e-shared-a-e8c0aa","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:16:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"404e9c4e-776a-4d53-b7d8-dece611643cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34358","PortSpecifier":{"PortValue":34358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","method":"POST","path":"/ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa/v1/completions","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34358","PortSpecifier":{"PortValue":34358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067396,"nanos":736360400},"http":{"id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8Wz6lpy1KqsNl7Ev_vUtc7ZA8fa93L2nNKClLCTZV0IHdpbcmEr7DO44hfZX"}
{"level":"debug","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8Wz6lpy1KqsNl7Ev_vUtc7ZA8fa93L2nNKClLCTZV0IHdpbcmEr7DO44hfZX\"}"}
{"level":"debug","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b35f4d5-07f0-4fe3-80fe-ed42cc42456c","keyName":"e2e-rate-a-ca4250","subscription":"e2e-rate-iso-a-ca4250","tenant":"e2e-shared-a-e8c0aa","userId":"7b35f4d5-07f0-4fe3-80fe-ed42cc42456c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa\",\"requestedSubscription\":\"e2e-rate-iso-a-ca4250\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e8c0aa","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca4250","namespace":"ai-tenant-e2e-shared-a-e8c0aa","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca4250"}
{"level":"debug","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7b35f4d5-07f0-4fe3-80fe-ed42cc42456c","keyName":"e2e-rate-a-ca4250","selected_subscription":"e2e-rate-iso-a-ca4250","selected_subscription_key":"ai-tenant-e2e-shared-a-e8c0aa/e2e-rate-iso-a-ca4250@ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e8c0aa","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca4250","namespace":"ai-tenant-e2e-shared-a-e8c0aa","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:16:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08ed8c24-9d8f-4cb8-8c41-dfeec4026c07","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34362","PortSpecifier":{"PortValue":34362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a32067c-fbde-4842-b935-e2abc021be8c","method":"POST","path":"/ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa/v1/completions","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34362","PortSpecifier":{"PortValue":34362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067397,"nanos":777213575},"http":{"id":"8a32067c-fbde-4842-b935-e2abc021be8c","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8Wz6lpy1KqsNl7Ev_vUtc7ZA8fa93L2nNKClLCTZV0IHdpbcmEr7DO44hfZX"}
{"level":"debug","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8Wz6lpy1KqsNl7Ev_vUtc7ZA8fa93L2nNKClLCTZV0IHdpbcmEr7DO44hfZX\"}"}
{"level":"debug","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b35f4d5-07f0-4fe3-80fe-ed42cc42456c","keyName":"e2e-rate-a-ca4250","subscription":"e2e-rate-iso-a-ca4250","tenant":"e2e-shared-a-e8c0aa","userId":"7b35f4d5-07f0-4fe3-80fe-ed42cc42456c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa\",\"requestedSubscription\":\"e2e-rate-iso-a-ca4250\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e8c0aa","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca4250","namespace":"ai-tenant-e2e-shared-a-e8c0aa","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca4250"}
{"level":"debug","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7b35f4d5-07f0-4fe3-80fe-ed42cc42456c","keyName":"e2e-rate-a-ca4250","selected_subscription":"e2e-rate-iso-a-ca4250","selected_subscription_key":"ai-tenant-e2e-shared-a-e8c0aa/e2e-rate-iso-a-ca4250@ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e8c0aa","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca4250","namespace":"ai-tenant-e2e-shared-a-e8c0aa","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:16:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a32067c-fbde-4842-b935-e2abc021be8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"741aefb0-cf01-4429-9f40-ad742604fee5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52258","PortSpecifier":{"PortValue":52258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"741aefb0-cf01-4429-9f40-ad742604fee5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"741aefb0-cf01-4429-9f40-ad742604fee5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52258","PortSpecifier":{"PortValue":52258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067408,"nanos":781204901},"http":{"id":"741aefb0-cf01-4429-9f40-ad742604fee5","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"741aefb0-cf01-4429-9f40-ad742604fee5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"741aefb0-cf01-4429-9f40-ad742604fee5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"741aefb0-cf01-4429-9f40-ad742604fee5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"741aefb0-cf01-4429-9f40-ad742604fee5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"741aefb0-cf01-4429-9f40-ad742604fee5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"741aefb0-cf01-4429-9f40-ad742604fee5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"741aefb0-cf01-4429-9f40-ad742604fee5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"741aefb0-cf01-4429-9f40-ad742604fee5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"741aefb0-cf01-4429-9f40-ad742604fee5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"741aefb0-cf01-4429-9f40-ad742604fee5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"741aefb0-cf01-4429-9f40-ad742604fee5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88b1dc50-28a7-4ff1-aafb-1f5a575711ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57622","PortSpecifier":{"PortValue":57622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88b1dc50-28a7-4ff1-aafb-1f5a575711ce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88b1dc50-28a7-4ff1-aafb-1f5a575711ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57622","PortSpecifier":{"PortValue":57622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067408,"nanos":824550113},"http":{"id":"88b1dc50-28a7-4ff1-aafb-1f5a575711ce","method":"POST","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88b1dc50-28a7-4ff1-aafb-1f5a575711ce","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88b1dc50-28a7-4ff1-aafb-1f5a575711ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"]}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88b1dc50-28a7-4ff1-aafb-1f5a575711ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c00247455cd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b211dc27-88c0-47d5-98b0-c238cf9aa109"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4bd83067-d2b4-4870-b597-3c1559ec6dde","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88b1dc50-28a7-4ff1-aafb-1f5a575711ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88b1dc50-28a7-4ff1-aafb-1f5a575711ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88b1dc50-28a7-4ff1-aafb-1f5a575711ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e98c02/rate-test-model-e98c02\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88b1dc50-28a7-4ff1-aafb-1f5a575711ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88b1dc50-28a7-4ff1-aafb-1f5a575711ce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88b1dc50-28a7-4ff1-aafb-1f5a575711ce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88b1dc50-28a7-4ff1-aafb-1f5a575711ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88b1dc50-28a7-4ff1-aafb-1f5a575711ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52272","PortSpecifier":{"PortValue":52272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","method":"POST","path":"/ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa/v1/completions","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52272","PortSpecifier":{"PortValue":52272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067408,"nanos":864967138},"http":{"id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vGeNqqFd0XNUAdYZ_Roz61gtUjKgzRpLqqvw9stp4dmqjyZS6dOFsVGTyyXd"}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vGeNqqFd0XNUAdYZ_Roz61gtUjKgzRpLqqvw9stp4dmqjyZS6dOFsVGTyyXd\"}"}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"87d76950-357d-443a-a9bb-3e5fdb48e76c","keyName":"e2e-rate-a-bec2db","subscription":"e2e-rate-iso-a-bec2db","tenant":"e2e-shared-a-e8c0aa","userId":"87d76950-357d-443a-a9bb-3e5fdb48e76c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa\",\"requestedSubscription\":\"e2e-rate-iso-a-bec2db\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e8c0aa","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bec2db","namespace":"ai-tenant-e2e-shared-a-e8c0aa","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bec2db"}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"87d76950-357d-443a-a9bb-3e5fdb48e76c","keyName":"e2e-rate-a-bec2db","selected_subscription":"e2e-rate-iso-a-bec2db","selected_subscription_key":"ai-tenant-e2e-shared-a-e8c0aa/e2e-rate-iso-a-bec2db@ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e8c0aa","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bec2db","namespace":"ai-tenant-e2e-shared-a-e8c0aa","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1422bbb-223d-49bc-98e6-78b6477e72cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52282","PortSpecifier":{"PortValue":52282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b92454d-5aea-4240-8971-aef5498b41cf","method":"POST","path":"/ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa/v1/completions","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52282","PortSpecifier":{"PortValue":52282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067409,"nanos":901934149},"http":{"id":"3b92454d-5aea-4240-8971-aef5498b41cf","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vGeNqqFd0XNUAdYZ_Roz61gtUjKgzRpLqqvw9stp4dmqjyZS6dOFsVGTyyXd"}
{"level":"debug","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vGeNqqFd0XNUAdYZ_Roz61gtUjKgzRpLqqvw9stp4dmqjyZS6dOFsVGTyyXd\"}"}
{"level":"debug","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"87d76950-357d-443a-a9bb-3e5fdb48e76c","keyName":"e2e-rate-a-bec2db","subscription":"e2e-rate-iso-a-bec2db","tenant":"e2e-shared-a-e8c0aa","userId":"87d76950-357d-443a-a9bb-3e5fdb48e76c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa\",\"requestedSubscription\":\"e2e-rate-iso-a-bec2db\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e8c0aa","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bec2db","namespace":"ai-tenant-e2e-shared-a-e8c0aa","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bec2db"}
{"level":"debug","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"87d76950-357d-443a-a9bb-3e5fdb48e76c","keyName":"e2e-rate-a-bec2db","selected_subscription":"e2e-rate-iso-a-bec2db","selected_subscription_key":"ai-tenant-e2e-shared-a-e8c0aa/e2e-rate-iso-a-bec2db@ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e8c0aa","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bec2db","namespace":"ai-tenant-e2e-shared-a-e8c0aa","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:16:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b92454d-5aea-4240-8971-aef5498b41cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52296","PortSpecifier":{"PortValue":52296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","method":"POST","path":"/ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa/v1/completions","host":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52296","PortSpecifier":{"PortValue":52296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067410,"nanos":940568684},"http":{"id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","method":"POST","headers":{":authority":"e2e-shared-a-e8c0aa.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vGeNqqFd0XNUAdYZ_Roz61gtUjKgzRpLqqvw9stp4dmqjyZS6dOFsVGTyyXd"}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vGeNqqFd0XNUAdYZ_Roz61gtUjKgzRpLqqvw9stp4dmqjyZS6dOFsVGTyyXd\"}"}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"87d76950-357d-443a-a9bb-3e5fdb48e76c","keyName":"e2e-rate-a-bec2db","subscription":"e2e-rate-iso-a-bec2db","tenant":"e2e-shared-a-e8c0aa","userId":"87d76950-357d-443a-a9bb-3e5fdb48e76c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa\",\"requestedSubscription\":\"e2e-rate-iso-a-bec2db\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e8c0aa.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e8c0aa","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bec2db","namespace":"ai-tenant-e2e-shared-a-e8c0aa","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bec2db"}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"87d76950-357d-443a-a9bb-3e5fdb48e76c","keyName":"e2e-rate-a-bec2db","selected_subscription":"e2e-rate-iso-a-bec2db","selected_subscription_key":"ai-tenant-e2e-shared-a-e8c0aa/e2e-rate-iso-a-bec2db@ai-tenant-e2e-shared-a-e8c0aa/rate-test-model-e8c0aa","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e8c0aa","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bec2db","namespace":"ai-tenant-e2e-shared-a-e8c0aa","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5fd4435-a9b0-42a2-a311-bdde1a479bd8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57632","PortSpecifier":{"PortValue":57632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02fca9e9-7923-41a5-bcda-06bc9556640f","method":"POST","path":"/ai-tenant-e2e-shared-b-e98c02/rate-test-model-e98c02/v1/completions","host":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57632","PortSpecifier":{"PortValue":57632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784067410,"nanos":978650751},"http":{"id":"02fca9e9-7923-41a5-bcda-06bc9556640f","method":"POST","headers":{":authority":"e2e-shared-b-e98c02.apps.cf88f39e-43a7-4769-97dc-9c00247455cd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-e98c02/rate-test-model-e98c02/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Y6W5AxzZtdLrkDWU_Qb40xPgp4cBzRFYgucrC15fP3TOKICFp4nNZXAWePnL"}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e98c02.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Y6W5AxzZtdLrkDWU_Qb40xPgp4cBzRFYgucrC15fP3TOKICFp4nNZXAWePnL\"}"}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e98c02.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"378156b1-3efc-46ea-bd04-ad84ad06fdff","keyName":"e2e-rate-b-bec2db","subscription":"e2e-rate-iso-b-bec2db","tenant":"e2e-shared-b-e98c02","userId":"378156b1-3efc-46ea-bd04-ad84ad06fdff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-e98c02.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-e98c02/rate-test-model-e98c02\",\"requestedSubscription\":\"e2e-rate-iso-b-bec2db\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e98c02.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e98c02","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bec2db","namespace":"ai-tenant-e2e-shared-b-e98c02","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e98c02/rate-test-model-e98c02\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-bec2db"}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"378156b1-3efc-46ea-bd04-ad84ad06fdff","keyName":"e2e-rate-b-bec2db","selected_subscription":"e2e-rate-iso-b-bec2db","selected_subscription_key":"ai-tenant-e2e-shared-b-e98c02/e2e-rate-iso-b-bec2db@ai-tenant-e2e-shared-b-e98c02/rate-test-model-e98c02","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e98c02","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bec2db","namespace":"ai-tenant-e2e-shared-b-e98c02","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02fca9e9-7923-41a5-bcda-06bc9556640f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbf5e52362c3a2c32f45c3f5a1e88aa7b53ac56e2ab9f75305712721dd09fa03"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5805fab77e91f8715a4dd7a6ac1ef6d0a34885e83b512afc2b9a1d59a1605a80"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de207e8d0db06beb3f786435209f48124e87fb851348934e3a6545e930408840"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e63d06fe47ac84ebd112a6c4710a06fde57a497886b47dfdd4c37ce91d246a2"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d284be313dc4b9451592248f8a1a55adcf7f10fcc1d03a482ef7f3c1b840a34a"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca4b8d6be6125f33f668722f372380fc45d8a0fb67032b306afeb7a5e6256cca"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0f94e59217d9195d09e1a0c2cd5dc01858adc869736a1cffe3f699c64786121"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3360a44ee4594245bd6ee353623d31d9c71cb4aad4efda62f0e0b659186d7ec"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61f8e6dfeaaf08abac02e8cdad5fcedddc860dc66b81fb6e5744b6e5425521ed"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91dd4aeb6083089513a8b0a2ab6ec2a3ee735d0f865e151bcaf7d75062ee29e0"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2cfd3692afd5daba6dbdf2876a244412ef4d9b168c04440cc452e453fbca7eb9"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0aea77eb05fc873945b77fc12c0c7a7cd29ba266c2a64d058d1e84338bc1ed9"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02505fb598340dc97fa1b3769feac66e767bdb4f10dd6e51f170a936df2c7c90"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6603d939db5c3b14bb65ed19c236a823156dfc6c73c0e2f5c12f973dc6b31090"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3664a9fb9db07018b502bde233e98b57ff6e4c1a319f8368208dc06211d6841f"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c234f0870bb0049608e67ba2334330b4f1d92f4bd7a3abf87e52ac39054d3929"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e95184c689cce766d7b1749f6da6d6912cc8d8ce5b154680c70d1ad5d9604a4d"}
{"level":"info","ts":"2026-07-14T22:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba5d402a02420e260de27123a4fc030a2ef4b80b5e4bd085cbfc85adaa578e51"}
{"level":"info","ts":"2026-07-14T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ccfb0dbf2b06eba4745a0725a006c3d2a96e8a959f22d9b7092390adddf4b5e"}
{"level":"info","ts":"2026-07-14T22:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aa12cfb509c4297bdb524a4dfdf4a64967d7e69898309048b90d1188769e0da"}