--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-07T01:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d43fbff6-dee8-447c-b7ff-3c69332b1d44","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-86cc19.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"de8f2efb-a81b-493d-8216-f29ef0eeeb57","keyName":"e2e-tenant-inference-86cc19","subscription":"test-model-86cc19-sub","tenant":"e2e-inf-a-86cc19","userId":"de8f2efb-a81b-493d-8216-f29ef0eeeb57","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T01:36:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d43fbff6-dee8-447c-b7ff-3c69332b1d44","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-86cc19.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-86cc19/test-model-86cc19\",\"requestedSubscription\":\"test-model-86cc19-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T01:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d43fbff6-dee8-447c-b7ff-3c69332b1d44","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-86cc19.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-86cc19","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-86cc19-sub","namespace":"ai-tenant-e2e-inf-a-86cc19","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T01:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d43fbff6-dee8-447c-b7ff-3c69332b1d44","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43fbff6-dee8-447c-b7ff-3c69332b1d44","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43fbff6-dee8-447c-b7ff-3c69332b1d44","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43fbff6-dee8-447c-b7ff-3c69332b1d44","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43fbff6-dee8-447c-b7ff-3c69332b1d44","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-86cc19/test-model-86cc19\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43fbff6-dee8-447c-b7ff-3c69332b1d44","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-86cc19-sub"}
{"level":"debug","ts":"2026-07-07T01:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43fbff6-dee8-447c-b7ff-3c69332b1d44","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43fbff6-dee8-447c-b7ff-3c69332b1d44","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43fbff6-dee8-447c-b7ff-3c69332b1d44","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"de8f2efb-a81b-493d-8216-f29ef0eeeb57","keyName":"e2e-tenant-inference-86cc19","selected_subscription":"test-model-86cc19-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-86cc19/test-model-86cc19-sub@ai-tenant-e2e-inf-a-86cc19/test-model-86cc19","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-86cc19","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-86cc19-sub","namespace":"ai-tenant-e2e-inf-a-86cc19","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T01:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d43fbff6-dee8-447c-b7ff-3c69332b1d44","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d43fbff6-dee8-447c-b7ff-3c69332b1d44","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85b6592a-9ee0-4cb2-bbd2-e0c2cfd9c760","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36918","PortSpecifier":{"PortValue":36918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85b6592a-9ee0-4cb2-bbd2-e0c2cfd9c760","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-86cc19.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85b6592a-9ee0-4cb2-bbd2-e0c2cfd9c760","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36918","PortSpecifier":{"PortValue":36918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388182,"nanos":238983988},"http":{"id":"85b6592a-9ee0-4cb2-bbd2-e0c2cfd9c760","method":"POST","headers":{":authority":"e2e-inf-a-86cc19.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"85b6592a-9ee0-4cb2-bbd2-e0c2cfd9c760","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85b6592a-9ee0-4cb2-bbd2-e0c2cfd9c760","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85b6592a-9ee0-4cb2-bbd2-e0c2cfd9c760","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4fb1cba628ac9047bca5b5dcf1750736c60c60ce2a0c461c45535b9b597eb29f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-86cc19.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85b6592a-9ee0-4cb2-bbd2-e0c2cfd9c760","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85b6592a-9ee0-4cb2-bbd2-e0c2cfd9c760","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85b6592a-9ee0-4cb2-bbd2-e0c2cfd9c760","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-86cc19/test-model-86cc19\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"85b6592a-9ee0-4cb2-bbd2-e0c2cfd9c760","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85b6592a-9ee0-4cb2-bbd2-e0c2cfd9c760","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85b6592a-9ee0-4cb2-bbd2-e0c2cfd9c760","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85b6592a-9ee0-4cb2-bbd2-e0c2cfd9c760","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85b6592a-9ee0-4cb2-bbd2-e0c2cfd9c760","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b13a116-1c24-40e9-a47b-1d4af59549a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39698","PortSpecifier":{"PortValue":39698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b13a116-1c24-40e9-a47b-1d4af59549a1","method":"POST","path":"/ai-tenant-e2e-inf-b-cf6840/test-model-cf6840/v1/chat/completions","host":"e2e-inf-b-cf6840.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b13a116-1c24-40e9-a47b-1d4af59549a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39698","PortSpecifier":{"PortValue":39698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388182,"nanos":281610421},"http":{"id":"5b13a116-1c24-40e9-a47b-1d4af59549a1","method":"POST","headers":{":authority":"e2e-inf-b-cf6840.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-cf6840/test-model-cf6840/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b13a116-1c24-40e9-a47b-1d4af59549a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AF6dJ7amjGP4RHal_lj5H4Qi1crK0dIeM4sJNaiva6GA5ZQMw1oCwD55A6QR"}
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b13a116-1c24-40e9-a47b-1d4af59549a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-cf6840.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AF6dJ7amjGP4RHal_lj5H4Qi1crK0dIeM4sJNaiva6GA5ZQMw1oCwD55A6QR\"}"}
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b13a116-1c24-40e9-a47b-1d4af59549a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-cf6840.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"5b13a116-1c24-40e9-a47b-1d4af59549a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-cf6840.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b13a116-1c24-40e9-a47b-1d4af59549a1","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"8ebf3133392b20bee0145dc5fd5e69a13bec0f5bc29580af0859dbe03ea5f328"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-cf6840.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-cf6840/test-model-cf6840/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b13a116-1c24-40e9-a47b-1d4af59549a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"5b13a116-1c24-40e9-a47b-1d4af59549a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b13a116-1c24-40e9-a47b-1d4af59549a1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T01:36:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b13a116-1c24-40e9-a47b-1d4af59549a1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T01:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ed71c1e7fa8070f3549f961706781eca779d3e32be0896a9ab616a51915256b"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0010d57443066e9ab58e4893162349244b9196feb4f8ff88d9ae91b428a3ae83"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/335254475ae04f28dafc77ecfb9cdedf8a26a17b12c25ac63f9a7b04a7e6b23e"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e84a80426589b65ed71272043f866204e9b0db76e9994c9793640f76bef31f7"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c5ac2a09c8da0c5ba00efff82e611e4013a3e309fbf3ab9fcf40be721d81f30"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c619cee24132883b0551e5a48b65738cb7fc075e96979d3979dba21de6c8b34"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78f4ddfd0892556a9361998cb4f36114827d2792195a1078c33405b0ef37cdf3"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ebf3133392b20bee0145dc5fd5e69a13bec0f5bc29580af0859dbe03ea5f328"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5cae01ff81eefefe3048fb26af1a5b658d095360fecf71155313ccd0811a65d"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/053a1071ae5f9d9eaf17ab65b44f52b54b648b5be3622bffe0d7e3eacecc7db6"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85f14ff07f40385a3c5d53ed5346959d1c4499fd47b717d70ebbf64441e1d4d6"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66f888a27c34231ff83082e95bac77cea49500d53f3203d96be8c2540d2116f8"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5990e9f3042b432920eccaf893ece0b39739cc3dfdb623fe6173bf88750992f"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4511e359ebd7fea023feb33d69d4ff258ce9813e763f9292713a8b0d61db8ad"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3793c43ac1f8bd7df9b0dd0a73ec19289b9ad0e2cae1793ee5daf164d5476db0"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b528b4d7fc97d4983196f0fd8c9b4299a75a537de0dfc9497134fbf9aecb0b13"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fb1cba628ac9047bca5b5dcf1750736c60c60ce2a0c461c45535b9b597eb29f"}
{"level":"info","ts":"2026-07-07T01:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d640f5324e6ec3f14e6a6787da61133dc7c97882ea3bfeee131ce5af70f5763b"}
{"level":"info","ts":"2026-07-07T01:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ee0ef5575d12df7c1e9a960006a0203bb67a71b12b65314dc6c85d3c0e30126"}
{"level":"info","ts":"2026-07-07T01:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/190dccbed0d6631c4ab5a623327b6e7cc683a88c4491466a15c251b9acabbbb8"}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8"}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8"}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8"}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8"}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8"}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e"}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e"}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e"}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e"}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e"}
{"level":"debug","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:37:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:37:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6"}
{"level":"debug","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6"}
{"level":"debug","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:37:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:37:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:37:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:37:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6"}
{"level":"debug","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6"}
{"level":"debug","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:37:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:37:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:37:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:37:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6"}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6"}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6"}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f"}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6"}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f"}
{"level":"error","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f"}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6"}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f"}
{"level":"info","ts":"2026-07-07T01:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1338a29fdd36fd30c7a1d7ddc8cda67735ed5ef438a40a8b1e667be0587e29e"}
{"level":"info","ts":"2026-07-07T01:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fff1a3e029c6393024c1ae30de39f16b647dfaf45f9b0941bdac6757780c80a8"}
{"level":"info","ts":"2026-07-07T01:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6716de2b5b84852b3d15748ef72d9621710ed3d81ad9b06a866649e306d6b27f"}
{"level":"info","ts":"2026-07-07T01:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec4537a80a4a48eb6e97a0c4209fe02b1493f013d23ad5e2e8c416b3527818a6"}
{"level":"debug","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2b24c4873a9de764535ee4588669864690329101b959de9b82e2db41a1cba2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2b24c4873a9de764535ee4588669864690329101b959de9b82e2db41a1cba2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2b24c4873a9de764535ee4588669864690329101b959de9b82e2db41a1cba2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2b24c4873a9de764535ee4588669864690329101b959de9b82e2db41a1cba2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b24c4873a9de764535ee4588669864690329101b959de9b82e2db41a1cba2f"}
{"level":"debug","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2b24c4873a9de764535ee4588669864690329101b959de9b82e2db41a1cba2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b24c4873a9de764535ee4588669864690329101b959de9b82e2db41a1cba2f"}
{"level":"debug","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2b24c4873a9de764535ee4588669864690329101b959de9b82e2db41a1cba2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2b24c4873a9de764535ee4588669864690329101b959de9b82e2db41a1cba2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2b24c4873a9de764535ee4588669864690329101b959de9b82e2db41a1cba2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2b24c4873a9de764535ee4588669864690329101b959de9b82e2db41a1cba2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"}
{"level":"debug","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b24c4873a9de764535ee4588669864690329101b959de9b82e2db41a1cba2f"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116"}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116"}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116"}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116"}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f"}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f"}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d815217ca3e78055392394383994c81eb9684a284ae715f0aa8edbb9c2f7b4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d815217ca3e78055392394383994c81eb9684a284ae715f0aa8edbb9c2f7b4b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d815217ca3e78055392394383994c81eb9684a284ae715f0aa8edbb9c2f7b4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d815217ca3e78055392394383994c81eb9684a284ae715f0aa8edbb9c2f7b4b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d815217ca3e78055392394383994c81eb9684a284ae715f0aa8edbb9c2f7b4b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d815217ca3e78055392394383994c81eb9684a284ae715f0aa8edbb9c2f7b4b7"}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d815217ca3e78055392394383994c81eb9684a284ae715f0aa8edbb9c2f7b4b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d815217ca3e78055392394383994c81eb9684a284ae715f0aa8edbb9c2f7b4b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d815217ca3e78055392394383994c81eb9684a284ae715f0aa8edbb9c2f7b4b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d815217ca3e78055392394383994c81eb9684a284ae715f0aa8edbb9c2f7b4b7"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d815217ca3e78055392394383994c81eb9684a284ae715f0aa8edbb9c2f7b4b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d815217ca3e78055392394383994c81eb9684a284ae715f0aa8edbb9c2f7b4b7"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f"}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c"}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4401a016f652d881982ffb0bb6b797b273b848eac68757fc93d3a82c0036ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4401a016f652d881982ffb0bb6b797b273b848eac68757fc93d3a82c0036ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4401a016f652d881982ffb0bb6b797b273b848eac68757fc93d3a82c0036ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4401a016f652d881982ffb0bb6b797b273b848eac68757fc93d3a82c0036ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b4401a016f652d881982ffb0bb6b797b273b848eac68757fc93d3a82c0036ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b4401a016f652d881982ffb0bb6b797b273b848eac68757fc93d3a82c0036ef"}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b4401a016f652d881982ffb0bb6b797b273b848eac68757fc93d3a82c0036ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b4401a016f652d881982ffb0bb6b797b273b848eac68757fc93d3a82c0036ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b4401a016f652d881982ffb0bb6b797b273b848eac68757fc93d3a82c0036ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b4401a016f652d881982ffb0bb6b797b273b848eac68757fc93d3a82c0036ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b4401a016f652d881982ffb0bb6b797b273b848eac68757fc93d3a82c0036ef"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772"}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772"}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772"}
{"level":"debug","ts":"2026-07-07T01:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T01:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T01:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9"}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9"}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9"}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e"}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e"}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e"}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9"}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e"}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9"}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e"}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9"}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37"}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e"}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37"}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9"}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e"}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37"}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37"}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37"}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7"}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7"}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad41c262b1d9cc08d210e28f166c3e07ff885d5d240866623f9c8d79b563a56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7"}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad41c262b1d9cc08d210e28f166c3e07ff885d5d240866623f9c8d79b563a56c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"957137cb817500fdc6a4f019c2dfe84ad426616b3bae72997086a37adfaf36fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"957137cb817500fdc6a4f019c2dfe84ad426616b3bae72997086a37adfaf36fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad41c262b1d9cc08d210e28f166c3e07ff885d5d240866623f9c8d79b563a56c"}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e46703253f9a29ea5f61e486a0a7d2dbe38b66e1121a2cab3c4ad8b641544d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e46703253f9a29ea5f61e486a0a7d2dbe38b66e1121a2cab3c4ad8b641544d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad41c262b1d9cc08d210e28f166c3e07ff885d5d240866623f9c8d79b563a56c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad41c262b1d9cc08d210e28f166c3e07ff885d5d240866623f9c8d79b563a56c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/957137cb817500fdc6a4f019c2dfe84ad426616b3bae72997086a37adfaf36fb"}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad41c262b1d9cc08d210e28f166c3e07ff885d5d240866623f9c8d79b563a56c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"957137cb817500fdc6a4f019c2dfe84ad426616b3bae72997086a37adfaf36fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["957137cb817500fdc6a4f019c2dfe84ad426616b3bae72997086a37adfaf36fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7"}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"957137cb817500fdc6a4f019c2dfe84ad426616b3bae72997086a37adfaf36fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e46703253f9a29ea5f61e486a0a7d2dbe38b66e1121a2cab3c4ad8b641544d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e46703253f9a29ea5f61e486a0a7d2dbe38b66e1121a2cab3c4ad8b641544d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad41c262b1d9cc08d210e28f166c3e07ff885d5d240866623f9c8d79b563a56c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"957137cb817500fdc6a4f019c2dfe84ad426616b3bae72997086a37adfaf36fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e46703253f9a29ea5f61e486a0a7d2dbe38b66e1121a2cab3c4ad8b641544d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e46703253f9a29ea5f61e486a0a7d2dbe38b66e1121a2cab3c4ad8b641544d"}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e46703253f9a29ea5f61e486a0a7d2dbe38b66e1121a2cab3c4ad8b641544d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11e46703253f9a29ea5f61e486a0a7d2dbe38b66e1121a2cab3c4ad8b641544d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e46703253f9a29ea5f61e486a0a7d2dbe38b66e1121a2cab3c4ad8b641544d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e46703253f9a29ea5f61e486a0a7d2dbe38b66e1121a2cab3c4ad8b641544d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad41c262b1d9cc08d210e28f166c3e07ff885d5d240866623f9c8d79b563a56c"}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/957137cb817500fdc6a4f019c2dfe84ad426616b3bae72997086a37adfaf36fb"}
{"level":"info","ts":"2026-07-07T01:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e46703253f9a29ea5f61e486a0a7d2dbe38b66e1121a2cab3c4ad8b641544d"}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec9371b3767fa574bd95c9eca95f504bcd14ee61e8569f68ada4375a71257987","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec9371b3767fa574bd95c9eca95f504bcd14ee61e8569f68ada4375a71257987","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec9371b3767fa574bd95c9eca95f504bcd14ee61e8569f68ada4375a71257987","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec9371b3767fa574bd95c9eca95f504bcd14ee61e8569f68ada4375a71257987","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec9371b3767fa574bd95c9eca95f504bcd14ee61e8569f68ada4375a71257987"}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec9371b3767fa574bd95c9eca95f504bcd14ee61e8569f68ada4375a71257987","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec9371b3767fa574bd95c9eca95f504bcd14ee61e8569f68ada4375a71257987"}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec9371b3767fa574bd95c9eca95f504bcd14ee61e8569f68ada4375a71257987","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec9371b3767fa574bd95c9eca95f504bcd14ee61e8569f68ada4375a71257987"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec9371b3767fa574bd95c9eca95f504bcd14ee61e8569f68ada4375a71257987","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec9371b3767fa574bd95c9eca95f504bcd14ee61e8569f68ada4375a71257987","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec9371b3767fa574bd95c9eca95f504bcd14ee61e8569f68ada4375a71257987"}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"}
{"level":"info","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:39:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:39:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:39:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:39:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"}
{"level":"info","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3f8f49f-ee2a-440c-a048-2959754b3843","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45832","PortSpecifier":{"PortValue":45832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3f8f49f-ee2a-440c-a048-2959754b3843","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3f8f49f-ee2a-440c-a048-2959754b3843","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45832","PortSpecifier":{"PortValue":45832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388348,"nanos":322525185},"http":{"id":"c3f8f49f-ee2a-440c-a048-2959754b3843","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3f8f49f-ee2a-440c-a048-2959754b3843","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3f8f49f-ee2a-440c-a048-2959754b3843","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3f8f49f-ee2a-440c-a048-2959754b3843","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3f8f49f-ee2a-440c-a048-2959754b3843","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3f8f49f-ee2a-440c-a048-2959754b3843","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3f8f49f-ee2a-440c-a048-2959754b3843","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/auth-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3f8f49f-ee2a-440c-a048-2959754b3843","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3f8f49f-ee2a-440c-a048-2959754b3843","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3f8f49f-ee2a-440c-a048-2959754b3843","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3f8f49f-ee2a-440c-a048-2959754b3843","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3f8f49f-ee2a-440c-a048-2959754b3843","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83b6a6b6-3fd7-4f90-8e85-8dfd410dd1cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45770","PortSpecifier":{"PortValue":45770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83b6a6b6-3fd7-4f90-8e85-8dfd410dd1cb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83b6a6b6-3fd7-4f90-8e85-8dfd410dd1cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45770","PortSpecifier":{"PortValue":45770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388348,"nanos":390686986},"http":{"id":"83b6a6b6-3fd7-4f90-8e85-8dfd410dd1cb","method":"POST","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83b6a6b6-3fd7-4f90-8e85-8dfd410dd1cb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83b6a6b6-3fd7-4f90-8e85-8dfd410dd1cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83b6a6b6-3fd7-4f90-8e85-8dfd410dd1cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83b6a6b6-3fd7-4f90-8e85-8dfd410dd1cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83b6a6b6-3fd7-4f90-8e85-8dfd410dd1cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83b6a6b6-3fd7-4f90-8e85-8dfd410dd1cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-126d68/auth-test-model-126d68\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83b6a6b6-3fd7-4f90-8e85-8dfd410dd1cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83b6a6b6-3fd7-4f90-8e85-8dfd410dd1cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83b6a6b6-3fd7-4f90-8e85-8dfd410dd1cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83b6a6b6-3fd7-4f90-8e85-8dfd410dd1cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83b6a6b6-3fd7-4f90-8e85-8dfd410dd1cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"961e94ed-6c3c-479e-b9bd-762e2fafdb4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45834","PortSpecifier":{"PortValue":45834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"961e94ed-6c3c-479e-b9bd-762e2fafdb4e","method":"GET","path":"/maas-api/v1/api-keys/a80c34d3-ad52-41c5-94c9-c559d110653f","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"961e94ed-6c3c-479e-b9bd-762e2fafdb4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45834","PortSpecifier":{"PortValue":45834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388348,"nanos":483550132},"http":{"id":"961e94ed-6c3c-479e-b9bd-762e2fafdb4e","method":"GET","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a80c34d3-ad52-41c5-94c9-c559d110653f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"961e94ed-6c3c-479e-b9bd-762e2fafdb4e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"961e94ed-6c3c-479e-b9bd-762e2fafdb4e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"961e94ed-6c3c-479e-b9bd-762e2fafdb4e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a80c34d3-ad52-41c5-94c9-c559d110653f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"961e94ed-6c3c-479e-b9bd-762e2fafdb4e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"961e94ed-6c3c-479e-b9bd-762e2fafdb4e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"961e94ed-6c3c-479e-b9bd-762e2fafdb4e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/auth-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"961e94ed-6c3c-479e-b9bd-762e2fafdb4e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"961e94ed-6c3c-479e-b9bd-762e2fafdb4e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"961e94ed-6c3c-479e-b9bd-762e2fafdb4e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"961e94ed-6c3c-479e-b9bd-762e2fafdb4e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"961e94ed-6c3c-479e-b9bd-762e2fafdb4e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eda69613-14a6-49fe-bd36-ea9eeae8c746","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45786","PortSpecifier":{"PortValue":45786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eda69613-14a6-49fe-bd36-ea9eeae8c746","method":"GET","path":"/maas-api/v1/api-keys/e539ec36-d992-4bfb-ba3f-6b43ca3d23a4","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eda69613-14a6-49fe-bd36-ea9eeae8c746","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45786","PortSpecifier":{"PortValue":45786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388348,"nanos":528248361},"http":{"id":"eda69613-14a6-49fe-bd36-ea9eeae8c746","method":"GET","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e539ec36-d992-4bfb-ba3f-6b43ca3d23a4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eda69613-14a6-49fe-bd36-ea9eeae8c746","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eda69613-14a6-49fe-bd36-ea9eeae8c746","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eda69613-14a6-49fe-bd36-ea9eeae8c746","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e539ec36-d992-4bfb-ba3f-6b43ca3d23a4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eda69613-14a6-49fe-bd36-ea9eeae8c746","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eda69613-14a6-49fe-bd36-ea9eeae8c746","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eda69613-14a6-49fe-bd36-ea9eeae8c746","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-126d68/auth-test-model-126d68\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eda69613-14a6-49fe-bd36-ea9eeae8c746","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eda69613-14a6-49fe-bd36-ea9eeae8c746","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eda69613-14a6-49fe-bd36-ea9eeae8c746","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eda69613-14a6-49fe-bd36-ea9eeae8c746","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:39:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eda69613-14a6-49fe-bd36-ea9eeae8c746","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8bf6ebf-859e-42e7-8bf9-22e779796308","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43806","PortSpecifier":{"PortValue":43806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8bf6ebf-859e-42e7-8bf9-22e779796308","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8bf6ebf-859e-42e7-8bf9-22e779796308","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43806","PortSpecifier":{"PortValue":43806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388365,"nanos":608814475},"http":{"id":"f8bf6ebf-859e-42e7-8bf9-22e779796308","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f8bf6ebf-859e-42e7-8bf9-22e779796308","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8bf6ebf-859e-42e7-8bf9-22e779796308","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8bf6ebf-859e-42e7-8bf9-22e779796308","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8bf6ebf-859e-42e7-8bf9-22e779796308","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8bf6ebf-859e-42e7-8bf9-22e779796308","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8bf6ebf-859e-42e7-8bf9-22e779796308","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/auth-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f8bf6ebf-859e-42e7-8bf9-22e779796308","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8bf6ebf-859e-42e7-8bf9-22e779796308","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8bf6ebf-859e-42e7-8bf9-22e779796308","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8bf6ebf-859e-42e7-8bf9-22e779796308","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8bf6ebf-859e-42e7-8bf9-22e779796308","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b80a7073-7928-4288-b19c-6d630dd663c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59108","PortSpecifier":{"PortValue":59108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b80a7073-7928-4288-b19c-6d630dd663c9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b80a7073-7928-4288-b19c-6d630dd663c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59108","PortSpecifier":{"PortValue":59108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388365,"nanos":642509372},"http":{"id":"b80a7073-7928-4288-b19c-6d630dd663c9","method":"POST","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b80a7073-7928-4288-b19c-6d630dd663c9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b80a7073-7928-4288-b19c-6d630dd663c9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b80a7073-7928-4288-b19c-6d630dd663c9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b80a7073-7928-4288-b19c-6d630dd663c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b80a7073-7928-4288-b19c-6d630dd663c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b80a7073-7928-4288-b19c-6d630dd663c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-126d68/auth-test-model-126d68\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b80a7073-7928-4288-b19c-6d630dd663c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b80a7073-7928-4288-b19c-6d630dd663c9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b80a7073-7928-4288-b19c-6d630dd663c9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b80a7073-7928-4288-b19c-6d630dd663c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b80a7073-7928-4288-b19c-6d630dd663c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e722695-a9c9-465e-b716-34fc709021ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43812","PortSpecifier":{"PortValue":43812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e722695-a9c9-465e-b716-34fc709021ec","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e722695-a9c9-465e-b716-34fc709021ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43812","PortSpecifier":{"PortValue":43812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388365,"nanos":687387218},"http":{"id":"0e722695-a9c9-465e-b716-34fc709021ec","method":"GET","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e722695-a9c9-465e-b716-34fc709021ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11Cj6vlZH8FYunpx9_kvPjnZNL7wBl873phD1NLSgqK91GQIejDncTS8LYHoG"}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e722695-a9c9-465e-b716-34fc709021ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11Cj6vlZH8FYunpx9_kvPjnZNL7wBl873phD1NLSgqK91GQIejDncTS8LYHoG\"}"}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e722695-a9c9-465e-b716-34fc709021ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"028c1e5d-27d6-49ee-9f18-ba867a54378a","keyName":"e2e-auth-iso-a-769fa6","subscription":"e2e-auth-iso-99bd5c","tenant":"e2e-shared-a-ced9d6","userId":"028c1e5d-27d6-49ee-9f18-ba867a54378a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e722695-a9c9-465e-b716-34fc709021ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e722695-a9c9-465e-b716-34fc709021ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e722695-a9c9-465e-b716-34fc709021ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e722695-a9c9-465e-b716-34fc709021ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/auth-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e722695-a9c9-465e-b716-34fc709021ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e722695-a9c9-465e-b716-34fc709021ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e722695-a9c9-465e-b716-34fc709021ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e722695-a9c9-465e-b716-34fc709021ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-99bd5c"}
{"level":"info","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e722695-a9c9-465e-b716-34fc709021ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:39:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e722695-a9c9-465e-b716-34fc709021ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a14b04e0-6de5-472f-8857-9e89a73e990c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53010","PortSpecifier":{"PortValue":53010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a14b04e0-6de5-472f-8857-9e89a73e990c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a14b04e0-6de5-472f-8857-9e89a73e990c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53010","PortSpecifier":{"PortValue":53010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388382,"nanos":731599981},"http":{"id":"a14b04e0-6de5-472f-8857-9e89a73e990c","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a14b04e0-6de5-472f-8857-9e89a73e990c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a14b04e0-6de5-472f-8857-9e89a73e990c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a14b04e0-6de5-472f-8857-9e89a73e990c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a14b04e0-6de5-472f-8857-9e89a73e990c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a14b04e0-6de5-472f-8857-9e89a73e990c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a14b04e0-6de5-472f-8857-9e89a73e990c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/auth-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a14b04e0-6de5-472f-8857-9e89a73e990c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a14b04e0-6de5-472f-8857-9e89a73e990c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a14b04e0-6de5-472f-8857-9e89a73e990c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a14b04e0-6de5-472f-8857-9e89a73e990c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a14b04e0-6de5-472f-8857-9e89a73e990c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e68fe948-5320-4f7d-9886-10dee0b263f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47462","PortSpecifier":{"PortValue":47462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e68fe948-5320-4f7d-9886-10dee0b263f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e68fe948-5320-4f7d-9886-10dee0b263f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47462","PortSpecifier":{"PortValue":47462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388382,"nanos":775115950},"http":{"id":"e68fe948-5320-4f7d-9886-10dee0b263f1","method":"POST","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e68fe948-5320-4f7d-9886-10dee0b263f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e68fe948-5320-4f7d-9886-10dee0b263f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e68fe948-5320-4f7d-9886-10dee0b263f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e68fe948-5320-4f7d-9886-10dee0b263f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e68fe948-5320-4f7d-9886-10dee0b263f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e68fe948-5320-4f7d-9886-10dee0b263f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-126d68/auth-test-model-126d68\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e68fe948-5320-4f7d-9886-10dee0b263f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e68fe948-5320-4f7d-9886-10dee0b263f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e68fe948-5320-4f7d-9886-10dee0b263f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e68fe948-5320-4f7d-9886-10dee0b263f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e68fe948-5320-4f7d-9886-10dee0b263f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0b63de0-e3a0-4236-b96d-42d5501907d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47478","PortSpecifier":{"PortValue":47478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0b63de0-e3a0-4236-b96d-42d5501907d1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0b63de0-e3a0-4236-b96d-42d5501907d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47478","PortSpecifier":{"PortValue":47478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388382,"nanos":820284096},"http":{"id":"d0b63de0-e3a0-4236-b96d-42d5501907d1","method":"GET","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0b63de0-e3a0-4236-b96d-42d5501907d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WawFRoQnwAfU514X_Peg6i9Fu4YX0BKfUwfkPRVyK4WascpRd5w2oKmvXfTN"}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d0b63de0-e3a0-4236-b96d-42d5501907d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-126d68.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WawFRoQnwAfU514X_Peg6i9Fu4YX0BKfUwfkPRVyK4WascpRd5w2oKmvXfTN\"}"}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d0b63de0-e3a0-4236-b96d-42d5501907d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-126d68.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0b63de0-e3a0-4236-b96d-42d5501907d1","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0b63de0-e3a0-4236-b96d-42d5501907d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"d0b63de0-e3a0-4236-b96d-42d5501907d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0b63de0-e3a0-4236-b96d-42d5501907d1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T01:39:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0b63de0-e3a0-4236-b96d-42d5501907d1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20eaa7ef-1e1a-4ec6-82e0-fa47a85b5e2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33624","PortSpecifier":{"PortValue":33624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20eaa7ef-1e1a-4ec6-82e0-fa47a85b5e2d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20eaa7ef-1e1a-4ec6-82e0-fa47a85b5e2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33624","PortSpecifier":{"PortValue":33624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388399,"nanos":893122431},"http":{"id":"20eaa7ef-1e1a-4ec6-82e0-fa47a85b5e2d","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20eaa7ef-1e1a-4ec6-82e0-fa47a85b5e2d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20eaa7ef-1e1a-4ec6-82e0-fa47a85b5e2d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20eaa7ef-1e1a-4ec6-82e0-fa47a85b5e2d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20eaa7ef-1e1a-4ec6-82e0-fa47a85b5e2d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20eaa7ef-1e1a-4ec6-82e0-fa47a85b5e2d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20eaa7ef-1e1a-4ec6-82e0-fa47a85b5e2d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/auth-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20eaa7ef-1e1a-4ec6-82e0-fa47a85b5e2d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20eaa7ef-1e1a-4ec6-82e0-fa47a85b5e2d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20eaa7ef-1e1a-4ec6-82e0-fa47a85b5e2d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20eaa7ef-1e1a-4ec6-82e0-fa47a85b5e2d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20eaa7ef-1e1a-4ec6-82e0-fa47a85b5e2d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b27f50ed-6bb1-48a4-b7f4-f49ec80a567c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50156","PortSpecifier":{"PortValue":50156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b27f50ed-6bb1-48a4-b7f4-f49ec80a567c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b27f50ed-6bb1-48a4-b7f4-f49ec80a567c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50156","PortSpecifier":{"PortValue":50156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388399,"nanos":930692138},"http":{"id":"b27f50ed-6bb1-48a4-b7f4-f49ec80a567c","method":"POST","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b27f50ed-6bb1-48a4-b7f4-f49ec80a567c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b27f50ed-6bb1-48a4-b7f4-f49ec80a567c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b27f50ed-6bb1-48a4-b7f4-f49ec80a567c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b27f50ed-6bb1-48a4-b7f4-f49ec80a567c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b27f50ed-6bb1-48a4-b7f4-f49ec80a567c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b27f50ed-6bb1-48a4-b7f4-f49ec80a567c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-126d68/auth-test-model-126d68\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b27f50ed-6bb1-48a4-b7f4-f49ec80a567c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b27f50ed-6bb1-48a4-b7f4-f49ec80a567c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b27f50ed-6bb1-48a4-b7f4-f49ec80a567c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b27f50ed-6bb1-48a4-b7f4-f49ec80a567c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b27f50ed-6bb1-48a4-b7f4-f49ec80a567c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a87e780-5323-4b5f-8bc1-370a924bb1fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33634","PortSpecifier":{"PortValue":33634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a87e780-5323-4b5f-8bc1-370a924bb1fe","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a87e780-5323-4b5f-8bc1-370a924bb1fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33634","PortSpecifier":{"PortValue":33634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388399,"nanos":988827453},"http":{"id":"1a87e780-5323-4b5f-8bc1-370a924bb1fe","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1a87e780-5323-4b5f-8bc1-370a924bb1fe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a87e780-5323-4b5f-8bc1-370a924bb1fe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a87e780-5323-4b5f-8bc1-370a924bb1fe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a87e780-5323-4b5f-8bc1-370a924bb1fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a87e780-5323-4b5f-8bc1-370a924bb1fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a87e780-5323-4b5f-8bc1-370a924bb1fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/auth-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a87e780-5323-4b5f-8bc1-370a924bb1fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a87e780-5323-4b5f-8bc1-370a924bb1fe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a87e780-5323-4b5f-8bc1-370a924bb1fe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a87e780-5323-4b5f-8bc1-370a924bb1fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:39:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a87e780-5323-4b5f-8bc1-370a924bb1fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:40:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83a4ee86-579b-4c57-855d-8cce32bf7c74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50172","PortSpecifier":{"PortValue":50172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83a4ee86-579b-4c57-855d-8cce32bf7c74","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:40:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83a4ee86-579b-4c57-855d-8cce32bf7c74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50172","PortSpecifier":{"PortValue":50172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388400,"nanos":45237254},"http":{"id":"83a4ee86-579b-4c57-855d-8cce32bf7c74","method":"POST","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:40:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83a4ee86-579b-4c57-855d-8cce32bf7c74","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:40:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83a4ee86-579b-4c57-855d-8cce32bf7c74","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:40:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83a4ee86-579b-4c57-855d-8cce32bf7c74","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:40:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83a4ee86-579b-4c57-855d-8cce32bf7c74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83a4ee86-579b-4c57-855d-8cce32bf7c74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83a4ee86-579b-4c57-855d-8cce32bf7c74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-126d68/auth-test-model-126d68\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83a4ee86-579b-4c57-855d-8cce32bf7c74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:40:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83a4ee86-579b-4c57-855d-8cce32bf7c74","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:40:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83a4ee86-579b-4c57-855d-8cce32bf7c74","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:40:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83a4ee86-579b-4c57-855d-8cce32bf7c74","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:40:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83a4ee86-579b-4c57-855d-8cce32bf7c74","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfc14d64-02ad-4dc8-a817-29fa209db5d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34050","PortSpecifier":{"PortValue":34050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cfc14d64-02ad-4dc8-a817-29fa209db5d8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfc14d64-02ad-4dc8-a817-29fa209db5d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34050","PortSpecifier":{"PortValue":34050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388417,"nanos":122468741},"http":{"id":"cfc14d64-02ad-4dc8-a817-29fa209db5d8","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cfc14d64-02ad-4dc8-a817-29fa209db5d8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cfc14d64-02ad-4dc8-a817-29fa209db5d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cfc14d64-02ad-4dc8-a817-29fa209db5d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfc14d64-02ad-4dc8-a817-29fa209db5d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfc14d64-02ad-4dc8-a817-29fa209db5d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfc14d64-02ad-4dc8-a817-29fa209db5d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/auth-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cfc14d64-02ad-4dc8-a817-29fa209db5d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfc14d64-02ad-4dc8-a817-29fa209db5d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfc14d64-02ad-4dc8-a817-29fa209db5d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfc14d64-02ad-4dc8-a817-29fa209db5d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfc14d64-02ad-4dc8-a817-29fa209db5d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04f00a62-98ab-4bd0-aaeb-ce1b4f16ec70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40596","PortSpecifier":{"PortValue":40596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04f00a62-98ab-4bd0-aaeb-ce1b4f16ec70","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04f00a62-98ab-4bd0-aaeb-ce1b4f16ec70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40596","PortSpecifier":{"PortValue":40596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388417,"nanos":159470460},"http":{"id":"04f00a62-98ab-4bd0-aaeb-ce1b4f16ec70","method":"POST","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"04f00a62-98ab-4bd0-aaeb-ce1b4f16ec70","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04f00a62-98ab-4bd0-aaeb-ce1b4f16ec70","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04f00a62-98ab-4bd0-aaeb-ce1b4f16ec70","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04f00a62-98ab-4bd0-aaeb-ce1b4f16ec70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04f00a62-98ab-4bd0-aaeb-ce1b4f16ec70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04f00a62-98ab-4bd0-aaeb-ce1b4f16ec70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-126d68/auth-test-model-126d68\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04f00a62-98ab-4bd0-aaeb-ce1b4f16ec70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04f00a62-98ab-4bd0-aaeb-ce1b4f16ec70","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04f00a62-98ab-4bd0-aaeb-ce1b4f16ec70","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04f00a62-98ab-4bd0-aaeb-ce1b4f16ec70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04f00a62-98ab-4bd0-aaeb-ce1b4f16ec70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"650ade6f-a6de-4662-8fca-3ca8620d137d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40612","PortSpecifier":{"PortValue":40612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"650ade6f-a6de-4662-8fca-3ca8620d137d","method":"GET","path":"/maas-api/v1/api-keys/7d8fda3f-9214-4bc1-987e-ff2dd8940137","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"650ade6f-a6de-4662-8fca-3ca8620d137d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40612","PortSpecifier":{"PortValue":40612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388417,"nanos":206214826},"http":{"id":"650ade6f-a6de-4662-8fca-3ca8620d137d","method":"GET","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7d8fda3f-9214-4bc1-987e-ff2dd8940137",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"650ade6f-a6de-4662-8fca-3ca8620d137d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"650ade6f-a6de-4662-8fca-3ca8620d137d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"650ade6f-a6de-4662-8fca-3ca8620d137d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7d8fda3f-9214-4bc1-987e-ff2dd8940137",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"650ade6f-a6de-4662-8fca-3ca8620d137d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"650ade6f-a6de-4662-8fca-3ca8620d137d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"650ade6f-a6de-4662-8fca-3ca8620d137d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-126d68/auth-test-model-126d68\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"650ade6f-a6de-4662-8fca-3ca8620d137d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"650ade6f-a6de-4662-8fca-3ca8620d137d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"650ade6f-a6de-4662-8fca-3ca8620d137d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"650ade6f-a6de-4662-8fca-3ca8620d137d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"650ade6f-a6de-4662-8fca-3ca8620d137d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"407875fb-60c8-4213-88ea-daa09762d325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34056","PortSpecifier":{"PortValue":34056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"407875fb-60c8-4213-88ea-daa09762d325","method":"GET","path":"/maas-api/v1/api-keys/7d8fda3f-9214-4bc1-987e-ff2dd8940137","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"407875fb-60c8-4213-88ea-daa09762d325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34056","PortSpecifier":{"PortValue":34056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388417,"nanos":245298072},"http":{"id":"407875fb-60c8-4213-88ea-daa09762d325","method":"GET","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7d8fda3f-9214-4bc1-987e-ff2dd8940137",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"407875fb-60c8-4213-88ea-daa09762d325","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"407875fb-60c8-4213-88ea-daa09762d325","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"407875fb-60c8-4213-88ea-daa09762d325","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7d8fda3f-9214-4bc1-987e-ff2dd8940137",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"407875fb-60c8-4213-88ea-daa09762d325","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"407875fb-60c8-4213-88ea-daa09762d325","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"407875fb-60c8-4213-88ea-daa09762d325","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/auth-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"407875fb-60c8-4213-88ea-daa09762d325","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"407875fb-60c8-4213-88ea-daa09762d325","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"407875fb-60c8-4213-88ea-daa09762d325","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"407875fb-60c8-4213-88ea-daa09762d325","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"407875fb-60c8-4213-88ea-daa09762d325","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea541b5a-1c60-4aec-a1c4-557ae79f9fab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50350","PortSpecifier":{"PortValue":50350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea541b5a-1c60-4aec-a1c4-557ae79f9fab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea541b5a-1c60-4aec-a1c4-557ae79f9fab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50350","PortSpecifier":{"PortValue":50350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388432,"nanos":200373436},"http":{"id":"ea541b5a-1c60-4aec-a1c4-557ae79f9fab","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea541b5a-1c60-4aec-a1c4-557ae79f9fab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea541b5a-1c60-4aec-a1c4-557ae79f9fab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea541b5a-1c60-4aec-a1c4-557ae79f9fab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea541b5a-1c60-4aec-a1c4-557ae79f9fab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea541b5a-1c60-4aec-a1c4-557ae79f9fab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea541b5a-1c60-4aec-a1c4-557ae79f9fab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/auth-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea541b5a-1c60-4aec-a1c4-557ae79f9fab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea541b5a-1c60-4aec-a1c4-557ae79f9fab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea541b5a-1c60-4aec-a1c4-557ae79f9fab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea541b5a-1c60-4aec-a1c4-557ae79f9fab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea541b5a-1c60-4aec-a1c4-557ae79f9fab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b609568-c72e-4993-809c-2f5788ac4506","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60076","PortSpecifier":{"PortValue":60076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b609568-c72e-4993-809c-2f5788ac4506","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b609568-c72e-4993-809c-2f5788ac4506","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60076","PortSpecifier":{"PortValue":60076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388432,"nanos":238423437},"http":{"id":"1b609568-c72e-4993-809c-2f5788ac4506","method":"POST","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b609568-c72e-4993-809c-2f5788ac4506","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b609568-c72e-4993-809c-2f5788ac4506","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b609568-c72e-4993-809c-2f5788ac4506","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b609568-c72e-4993-809c-2f5788ac4506","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b609568-c72e-4993-809c-2f5788ac4506","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b609568-c72e-4993-809c-2f5788ac4506","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-126d68/auth-test-model-126d68\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b609568-c72e-4993-809c-2f5788ac4506","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b609568-c72e-4993-809c-2f5788ac4506","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b609568-c72e-4993-809c-2f5788ac4506","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b609568-c72e-4993-809c-2f5788ac4506","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b609568-c72e-4993-809c-2f5788ac4506","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50362","PortSpecifier":{"PortValue":50362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50362","PortSpecifier":{"PortValue":50362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388432,"nanos":274282046},"http":{"id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XOr4c8jAEpt6cn1z_vJ37SjRBpdaFHDUeBk5zs6eIEZmSEJ16F7hljfM0xn6"}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XOr4c8jAEpt6cn1z_vJ37SjRBpdaFHDUeBk5zs6eIEZmSEJ16F7hljfM0xn6\"}"}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"09d92a4c-3e9e-4d48-8bee-b67279daed04","keyName":"e2e-auth-iso-a-02b761","subscription":"e2e-auth-iso-5e6eb4","tenant":"e2e-shared-a-ced9d6","userId":"09d92a4c-3e9e-4d48-8bee-b67279daed04","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/auth-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-5e6eb4"}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2174c8e3-5a79-4c4b-837c-fc728f1c8f5b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b4401a016f652d881982ffb0bb6b797b273b848eac68757fc93d3a82c0036ef"}
{"level":"info","ts":"2026-07-07T01:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/957137cb817500fdc6a4f019c2dfe84ad426616b3bae72997086a37adfaf36fb"}
{"level":"info","ts":"2026-07-07T01:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e286c87458f6c11b46d9c63b442fa999dc071d945095c7e3902e1278cbd1772"}
{"level":"info","ts":"2026-07-07T01:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec9371b3767fa574bd95c9eca95f504bcd14ee61e8569f68ada4375a71257987"}
{"level":"info","ts":"2026-07-07T01:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38e246d496e0bab992bda07f63ba5584c3a299bdf801ed33e6b9ef92ad4032c9"}
{"level":"info","ts":"2026-07-07T01:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f5a20751f45c66196fe6645eb38823d0e0c014035c33bf5e3e3aee4bd32e315"}
{"level":"info","ts":"2026-07-07T01:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdb1766a7f55bb50b3d5c6000c8cf5adf30d8342194fc155f55a83e979472e1c"}
{"level":"info","ts":"2026-07-07T01:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a74fcbe104b8d0a99a7e799ab7c5e4a8beacdb941f92fabc318b85059fbb3b37"}
{"level":"info","ts":"2026-07-07T01:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad41c262b1d9cc08d210e28f166c3e07ff885d5d240866623f9c8d79b563a56c"}
{"level":"info","ts":"2026-07-07T01:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b8cd1be4aa660f34456db7c7c290c197d39a872e024bead64c1304e271467c9"}
{"level":"info","ts":"2026-07-07T01:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2b24c4873a9de764535ee4588669864690329101b959de9b82e2db41a1cba2f"}
{"level":"info","ts":"2026-07-07T01:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d466d8c48cf6877255955630a11860fa76b21381671e0403b5ccf43b3794160e"}
{"level":"info","ts":"2026-07-07T01:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/784cb85dd6aaf2946aae83e6805da443e16e2005eb2563666f69e409929ff116"}
{"level":"info","ts":"2026-07-07T01:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbc9100f29ac8e45f731a385e6be4018349f187c0cd90d0638109f894fc128d7"}
{"level":"info","ts":"2026-07-07T01:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23bd8d8e10c659a20c4c536eb636f6a3238d73c5917936a9b46952315922e88f"}
{"level":"info","ts":"2026-07-07T01:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d815217ca3e78055392394383994c81eb9684a284ae715f0aa8edbb9c2f7b4b7"}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803"}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803"}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803"}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"info","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803"}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803"}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803"}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf"}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803"}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf"}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143"}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143"}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143"}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a265b4404c7d5bec68cef6792c8e859fe33ae9f7529d930b06f450ffe47d059","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a265b4404c7d5bec68cef6792c8e859fe33ae9f7529d930b06f450ffe47d059","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a265b4404c7d5bec68cef6792c8e859fe33ae9f7529d930b06f450ffe47d059","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a265b4404c7d5bec68cef6792c8e859fe33ae9f7529d930b06f450ffe47d059","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a265b4404c7d5bec68cef6792c8e859fe33ae9f7529d930b06f450ffe47d059"}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a265b4404c7d5bec68cef6792c8e859fe33ae9f7529d930b06f450ffe47d059","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a265b4404c7d5bec68cef6792c8e859fe33ae9f7529d930b06f450ffe47d059"}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a265b4404c7d5bec68cef6792c8e859fe33ae9f7529d930b06f450ffe47d059","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a265b4404c7d5bec68cef6792c8e859fe33ae9f7529d930b06f450ffe47d059"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143"}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a265b4404c7d5bec68cef6792c8e859fe33ae9f7529d930b06f450ffe47d059","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a265b4404c7d5bec68cef6792c8e859fe33ae9f7529d930b06f450ffe47d059","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249"}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a265b4404c7d5bec68cef6792c8e859fe33ae9f7529d930b06f450ffe47d059"}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249"}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c831a4305a103758f2ce8065c356c0779273283600bf49d629cb2fc70aa41994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c831a4305a103758f2ce8065c356c0779273283600bf49d629cb2fc70aa41994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c831a4305a103758f2ce8065c356c0779273283600bf49d629cb2fc70aa41994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c831a4305a103758f2ce8065c356c0779273283600bf49d629cb2fc70aa41994","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c831a4305a103758f2ce8065c356c0779273283600bf49d629cb2fc70aa41994"}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c831a4305a103758f2ce8065c356c0779273283600bf49d629cb2fc70aa41994","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c831a4305a103758f2ce8065c356c0779273283600bf49d629cb2fc70aa41994"}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ea0d38761ba74762bdb6938db9dfcd76bc36eebf17b1aa649e86201b38a881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ea0d38761ba74762bdb6938db9dfcd76bc36eebf17b1aa649e86201b38a881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c831a4305a103758f2ce8065c356c0779273283600bf49d629cb2fc70aa41994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c831a4305a103758f2ce8065c356c0779273283600bf49d629cb2fc70aa41994"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ea0d38761ba74762bdb6938db9dfcd76bc36eebf17b1aa649e86201b38a881"}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c831a4305a103758f2ce8065c356c0779273283600bf49d629cb2fc70aa41994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ea0d38761ba74762bdb6938db9dfcd76bc36eebf17b1aa649e86201b38a881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c831a4305a103758f2ce8065c356c0779273283600bf49d629cb2fc70aa41994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ea0d38761ba74762bdb6938db9dfcd76bc36eebf17b1aa649e86201b38a881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ea0d38761ba74762bdb6938db9dfcd76bc36eebf17b1aa649e86201b38a881"}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ea0d38761ba74762bdb6938db9dfcd76bc36eebf17b1aa649e86201b38a881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0ea0d38761ba74762bdb6938db9dfcd76bc36eebf17b1aa649e86201b38a881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c831a4305a103758f2ce8065c356c0779273283600bf49d629cb2fc70aa41994"}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ea0d38761ba74762bdb6938db9dfcd76bc36eebf17b1aa649e86201b38a881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ea0d38761ba74762bdb6938db9dfcd76bc36eebf17b1aa649e86201b38a881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ea0d38761ba74762bdb6938db9dfcd76bc36eebf17b1aa649e86201b38a881"}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"}
{"level":"info","ts":"2026-07-07T01:41:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825"}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825"}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825"}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a5b3e8ce021b0d56173b35d25a942b7debc4d31d6b38145e51dcd02348022b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a5b3e8ce021b0d56173b35d25a942b7debc4d31d6b38145e51dcd02348022b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a5b3e8ce021b0d56173b35d25a942b7debc4d31d6b38145e51dcd02348022b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a5b3e8ce021b0d56173b35d25a942b7debc4d31d6b38145e51dcd02348022b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a5b3e8ce021b0d56173b35d25a942b7debc4d31d6b38145e51dcd02348022b1"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a5b3e8ce021b0d56173b35d25a942b7debc4d31d6b38145e51dcd02348022b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a5b3e8ce021b0d56173b35d25a942b7debc4d31d6b38145e51dcd02348022b1"}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a5b3e8ce021b0d56173b35d25a942b7debc4d31d6b38145e51dcd02348022b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a5b3e8ce021b0d56173b35d25a942b7debc4d31d6b38145e51dcd02348022b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a5b3e8ce021b0d56173b35d25a942b7debc4d31d6b38145e51dcd02348022b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96b5c6d352100e7a5612ca834d09da38f8ecb3095e72ef5191da29a6191e390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96b5c6d352100e7a5612ca834d09da38f8ecb3095e72ef5191da29a6191e390","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a5b3e8ce021b0d56173b35d25a942b7debc4d31d6b38145e51dcd02348022b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96b5c6d352100e7a5612ca834d09da38f8ecb3095e72ef5191da29a6191e390"}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96b5c6d352100e7a5612ca834d09da38f8ecb3095e72ef5191da29a6191e390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96b5c6d352100e7a5612ca834d09da38f8ecb3095e72ef5191da29a6191e390"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a5b3e8ce021b0d56173b35d25a942b7debc4d31d6b38145e51dcd02348022b1"}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96b5c6d352100e7a5612ca834d09da38f8ecb3095e72ef5191da29a6191e390","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96b5c6d352100e7a5612ca834d09da38f8ecb3095e72ef5191da29a6191e390","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96b5c6d352100e7a5612ca834d09da38f8ecb3095e72ef5191da29a6191e390"}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"}
{"level":"debug","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"}
{"level":"debug","ts":"2026-07-07T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"}
{"level":"debug","ts":"2026-07-07T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"}
{"level":"debug","ts":"2026-07-07T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249"}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249"}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c831a4305a103758f2ce8065c356c0779273283600bf49d629cb2fc70aa41994","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249"}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c831a4305a103758f2ce8065c356c0779273283600bf49d629cb2fc70aa41994"}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a5b3e8ce021b0d56173b35d25a942b7debc4d31d6b38145e51dcd02348022b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a5b3e8ce021b0d56173b35d25a942b7debc4d31d6b38145e51dcd02348022b1"}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ea0d38761ba74762bdb6938db9dfcd76bc36eebf17b1aa649e86201b38a881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf"}
{"level":"debug","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ea0d38761ba74762bdb6938db9dfcd76bc36eebf17b1aa649e86201b38a881"}
{"level":"info","ts":"2026-07-07T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825"}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa"}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa"}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa"}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143"}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa"}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a265b4404c7d5bec68cef6792c8e859fe33ae9f7529d930b06f450ffe47d059","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e46703253f9a29ea5f61e486a0a7d2dbe38b66e1121a2cab3c4ad8b641544d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803"}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"}
{"level":"debug","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96b5c6d352100e7a5612ca834d09da38f8ecb3095e72ef5191da29a6191e390","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a265b4404c7d5bec68cef6792c8e859fe33ae9f7529d930b06f450ffe47d059"}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e46703253f9a29ea5f61e486a0a7d2dbe38b66e1121a2cab3c4ad8b641544d"}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"}
{"level":"info","ts":"2026-07-07T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96b5c6d352100e7a5612ca834d09da38f8ecb3095e72ef5191da29a6191e390"}
{"level":"info","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"580a4797-1855-4d6c-a4c7-f20cd60b8561","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53026","PortSpecifier":{"PortValue":53026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"580a4797-1855-4d6c-a4c7-f20cd60b8561","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"580a4797-1855-4d6c-a4c7-f20cd60b8561","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53026","PortSpecifier":{"PortValue":53026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388515,"nanos":491654643},"http":{"id":"580a4797-1855-4d6c-a4c7-f20cd60b8561","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"580a4797-1855-4d6c-a4c7-f20cd60b8561","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"580a4797-1855-4d6c-a4c7-f20cd60b8561","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"580a4797-1855-4d6c-a4c7-f20cd60b8561","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"580a4797-1855-4d6c-a4c7-f20cd60b8561","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"580a4797-1855-4d6c-a4c7-f20cd60b8561","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"580a4797-1855-4d6c-a4c7-f20cd60b8561","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/sub-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"580a4797-1855-4d6c-a4c7-f20cd60b8561","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"580a4797-1855-4d6c-a4c7-f20cd60b8561","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"580a4797-1855-4d6c-a4c7-f20cd60b8561","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"580a4797-1855-4d6c-a4c7-f20cd60b8561","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"580a4797-1855-4d6c-a4c7-f20cd60b8561","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b49c36d-d124-403a-ba4f-bb2b9828649d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40024","PortSpecifier":{"PortValue":40024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b49c36d-d124-403a-ba4f-bb2b9828649d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b49c36d-d124-403a-ba4f-bb2b9828649d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40024","PortSpecifier":{"PortValue":40024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388515,"nanos":532426364},"http":{"id":"3b49c36d-d124-403a-ba4f-bb2b9828649d","method":"POST","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3b49c36d-d124-403a-ba4f-bb2b9828649d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b49c36d-d124-403a-ba4f-bb2b9828649d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b49c36d-d124-403a-ba4f-bb2b9828649d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b49c36d-d124-403a-ba4f-bb2b9828649d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b49c36d-d124-403a-ba4f-bb2b9828649d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b49c36d-d124-403a-ba4f-bb2b9828649d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-126d68/sub-test-model-126d68\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b49c36d-d124-403a-ba4f-bb2b9828649d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b49c36d-d124-403a-ba4f-bb2b9828649d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b49c36d-d124-403a-ba4f-bb2b9828649d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b49c36d-d124-403a-ba4f-bb2b9828649d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b49c36d-d124-403a-ba4f-bb2b9828649d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"569023ef-00c0-40da-aa82-1367e488c4e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53042","PortSpecifier":{"PortValue":53042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"569023ef-00c0-40da-aa82-1367e488c4e9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"569023ef-00c0-40da-aa82-1367e488c4e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53042","PortSpecifier":{"PortValue":53042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388515,"nanos":577200046},"http":{"id":"569023ef-00c0-40da-aa82-1367e488c4e9","method":"GET","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"569023ef-00c0-40da-aa82-1367e488c4e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UVkz3HKl2oYQF331_OnL2ysInbA15PJwBhSjBwBy1UckDEJ1cnLUYVLbGXu3"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"569023ef-00c0-40da-aa82-1367e488c4e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UVkz3HKl2oYQF331_OnL2ysInbA15PJwBhSjBwBy1UckDEJ1cnLUYVLbGXu3\"}"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"569023ef-00c0-40da-aa82-1367e488c4e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6547a78b-e25f-4131-b4e9-307f6920d73b","keyName":"e2e-sub-iso-6ce270","subscription":"e2e-a-only-b95659","tenant":"e2e-shared-a-ced9d6","userId":"6547a78b-e25f-4131-b4e9-307f6920d73b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"569023ef-00c0-40da-aa82-1367e488c4e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"569023ef-00c0-40da-aa82-1367e488c4e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"569023ef-00c0-40da-aa82-1367e488c4e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"569023ef-00c0-40da-aa82-1367e488c4e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/sub-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"569023ef-00c0-40da-aa82-1367e488c4e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"569023ef-00c0-40da-aa82-1367e488c4e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"569023ef-00c0-40da-aa82-1367e488c4e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"569023ef-00c0-40da-aa82-1367e488c4e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-b95659"}
{"level":"info","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"569023ef-00c0-40da-aa82-1367e488c4e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"569023ef-00c0-40da-aa82-1367e488c4e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40032","PortSpecifier":{"PortValue":40032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40032","PortSpecifier":{"PortValue":40032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388515,"nanos":619032979},"http":{"id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","method":"GET","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11bfkOd9oHsKMNtJS_Qbv07mEare3fysFdA7RtHxE6Kn6FQc2tEO4Dlyf3pkO"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-126d68.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11bfkOd9oHsKMNtJS_Qbv07mEare3fysFdA7RtHxE6Kn6FQc2tEO4Dlyf3pkO\"}"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-126d68.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c947541b-5066-45ff-a992-6a2fe96882db","keyName":"e2e-sub-iso-697f7b","subscription":"e2e-b-only-b95659","tenant":"e2e-shared-b-126d68","userId":"c947541b-5066-45ff-a992-6a2fe96882db","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-126d68/sub-test-model-126d68\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-b95659"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:41:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54c0379f-5464-4c77-8a81-22d4e1f49dbb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adb2f27f-71f1-4ffe-94e7-7d25aeda0998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55138","PortSpecifier":{"PortValue":55138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adb2f27f-71f1-4ffe-94e7-7d25aeda0998","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adb2f27f-71f1-4ffe-94e7-7d25aeda0998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55138","PortSpecifier":{"PortValue":55138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388529,"nanos":735958235},"http":{"id":"adb2f27f-71f1-4ffe-94e7-7d25aeda0998","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"adb2f27f-71f1-4ffe-94e7-7d25aeda0998","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"adb2f27f-71f1-4ffe-94e7-7d25aeda0998","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"adb2f27f-71f1-4ffe-94e7-7d25aeda0998","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adb2f27f-71f1-4ffe-94e7-7d25aeda0998","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adb2f27f-71f1-4ffe-94e7-7d25aeda0998","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adb2f27f-71f1-4ffe-94e7-7d25aeda0998","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/sub-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"adb2f27f-71f1-4ffe-94e7-7d25aeda0998","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adb2f27f-71f1-4ffe-94e7-7d25aeda0998","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adb2f27f-71f1-4ffe-94e7-7d25aeda0998","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adb2f27f-71f1-4ffe-94e7-7d25aeda0998","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adb2f27f-71f1-4ffe-94e7-7d25aeda0998","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5792e77-85d2-4944-97bd-68fc50d9354b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46314","PortSpecifier":{"PortValue":46314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5792e77-85d2-4944-97bd-68fc50d9354b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5792e77-85d2-4944-97bd-68fc50d9354b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46314","PortSpecifier":{"PortValue":46314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388529,"nanos":772736555},"http":{"id":"f5792e77-85d2-4944-97bd-68fc50d9354b","method":"POST","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f5792e77-85d2-4944-97bd-68fc50d9354b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5792e77-85d2-4944-97bd-68fc50d9354b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5792e77-85d2-4944-97bd-68fc50d9354b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5792e77-85d2-4944-97bd-68fc50d9354b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5792e77-85d2-4944-97bd-68fc50d9354b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5792e77-85d2-4944-97bd-68fc50d9354b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-126d68/sub-test-model-126d68\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f5792e77-85d2-4944-97bd-68fc50d9354b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5792e77-85d2-4944-97bd-68fc50d9354b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5792e77-85d2-4944-97bd-68fc50d9354b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5792e77-85d2-4944-97bd-68fc50d9354b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5792e77-85d2-4944-97bd-68fc50d9354b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55154","PortSpecifier":{"PortValue":55154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55154","PortSpecifier":{"PortValue":55154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388529,"nanos":812860077},"http":{"id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3rYnlZ9JrYZPcxEk_yePjmfQa62TQduKAwFWILzSqvMPguRg9jPGhyaE20U1"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3rYnlZ9JrYZPcxEk_yePjmfQa62TQduKAwFWILzSqvMPguRg9jPGhyaE20U1\"}"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7ce03a53-f113-4021-8492-237564fad136","keyName":"e2e-sub-iso-252162","subscription":"e2e-shared-sub-1d50eb","tenant":"e2e-shared-a-ced9d6","userId":"7ce03a53-f113-4021-8492-237564fad136","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/sub-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1d50eb"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32e43ea0-19cf-415f-8e2f-8dad3b22101e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32f1204a-b4d8-4625-9a43-21e5336ed578","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46320","PortSpecifier":{"PortValue":46320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32f1204a-b4d8-4625-9a43-21e5336ed578","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32f1204a-b4d8-4625-9a43-21e5336ed578","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46320","PortSpecifier":{"PortValue":46320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388529,"nanos":866718146},"http":{"id":"32f1204a-b4d8-4625-9a43-21e5336ed578","method":"POST","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32f1204a-b4d8-4625-9a43-21e5336ed578","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dj49dDeiJUDjQAtu_YlTY6LLw5W1BiYFwtbUaNEr1ysV4uoGAUbE4AEFoNwf"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32f1204a-b4d8-4625-9a43-21e5336ed578","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-126d68.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dj49dDeiJUDjQAtu_YlTY6LLw5W1BiYFwtbUaNEr1ysV4uoGAUbE4AEFoNwf\"}"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32f1204a-b4d8-4625-9a43-21e5336ed578","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-126d68.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ade5d3d4-52ec-4a66-807b-95406e62c50c","keyName":"e2e-sub-iso-874c87","subscription":"e2e-shared-sub-1d50eb","tenant":"e2e-shared-b-126d68","userId":"ade5d3d4-52ec-4a66-807b-95406e62c50c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32f1204a-b4d8-4625-9a43-21e5336ed578","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32f1204a-b4d8-4625-9a43-21e5336ed578","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32f1204a-b4d8-4625-9a43-21e5336ed578","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32f1204a-b4d8-4625-9a43-21e5336ed578","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-126d68/sub-test-model-126d68\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32f1204a-b4d8-4625-9a43-21e5336ed578","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32f1204a-b4d8-4625-9a43-21e5336ed578","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32f1204a-b4d8-4625-9a43-21e5336ed578","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1d50eb"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32f1204a-b4d8-4625-9a43-21e5336ed578","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32f1204a-b4d8-4625-9a43-21e5336ed578","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32f1204a-b4d8-4625-9a43-21e5336ed578","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88edbc154b38b98223f8b18e8d7896074051f1589a1f1b193b39c1be504ed143"}
{"level":"info","ts":"2026-07-07T01:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/420a63c5c3bbca0b397383b9d13a67a8cf4f5676f218b9b97423e89b60ef0eaa"}
{"level":"info","ts":"2026-07-07T01:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9f7bf7557d4c72666e6dc9cf5aeaf3985a21cf8c309da97bd87bd6e87b07ff8"}
{"level":"info","ts":"2026-07-07T01:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63d5600519c71f66fd6714796a1bea894a881c2b5dbc852c77935bdf6371d67e"}
{"level":"info","ts":"2026-07-07T01:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ef1e31096e805f27d75ee926b785488c5303dbe54ae751c01b5a33f56ae8fbf"}
{"level":"info","ts":"2026-07-07T01:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80314e406c31e60f6a45d5ad5c2be8243a03c91ffdf46c069dfa2b2c06dab122"}
{"level":"info","ts":"2026-07-07T01:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e96b5c6d352100e7a5612ca834d09da38f8ecb3095e72ef5191da29a6191e390"}
{"level":"info","ts":"2026-07-07T01:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0ea0d38761ba74762bdb6938db9dfcd76bc36eebf17b1aa649e86201b38a881"}
{"level":"info","ts":"2026-07-07T01:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a5b3e8ce021b0d56173b35d25a942b7debc4d31d6b38145e51dcd02348022b1"}
{"level":"info","ts":"2026-07-07T01:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c831a4305a103758f2ce8065c356c0779273283600bf49d629cb2fc70aa41994"}
{"level":"info","ts":"2026-07-07T01:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72a9b334c0b5e8e718495c11b8168712d871e64bd4b9f6302ac91db5f6752825"}
{"level":"info","ts":"2026-07-07T01:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a265b4404c7d5bec68cef6792c8e859fe33ae9f7529d930b06f450ffe47d059"}
{"level":"info","ts":"2026-07-07T01:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0399a82cafd259ecea3411b4a77a1fff775ba101cce8f23f6e00a6a1b1a9803"}
{"level":"info","ts":"2026-07-07T01:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abb8633f3f554bd9ccf97288950f3bf5c8397fdc8cfe70d92916d218cf168249"}
{"level":"info","ts":"2026-07-07T01:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f196085bde8c1a7daf7fbb61e7e39d8c16ecaac2ecb0915a9a6be5af7c1c627"}
{"level":"info","ts":"2026-07-07T01:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0699b742a1aaa8d75220786b07cbe678776b045b961f5b0ebabef4f7a5985787"}
{"level":"debug","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa"}
{"level":"info","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa"}
{"level":"info","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa"}
{"level":"debug","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa"}
{"level":"debug","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa"}
{"level":"debug","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa"}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444"}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444"}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444"}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444"}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444"}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444"}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444"}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b90cd04393e7bf40876f5bd7ef6e4ef43ed0e1a887480196725ef16b931f2e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b90cd04393e7bf40876f5bd7ef6e4ef43ed0e1a887480196725ef16b931f2e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b90cd04393e7bf40876f5bd7ef6e4ef43ed0e1a887480196725ef16b931f2e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b90cd04393e7bf40876f5bd7ef6e4ef43ed0e1a887480196725ef16b931f2e6"}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b90cd04393e7bf40876f5bd7ef6e4ef43ed0e1a887480196725ef16b931f2e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b90cd04393e7bf40876f5bd7ef6e4ef43ed0e1a887480196725ef16b931f2e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b90cd04393e7bf40876f5bd7ef6e4ef43ed0e1a887480196725ef16b931f2e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444"}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b90cd04393e7bf40876f5bd7ef6e4ef43ed0e1a887480196725ef16b931f2e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b90cd04393e7bf40876f5bd7ef6e4ef43ed0e1a887480196725ef16b931f2e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b90cd04393e7bf40876f5bd7ef6e4ef43ed0e1a887480196725ef16b931f2e6"}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75"}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75"}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75"}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ef99ed9fe35ce291a15d159857ab6d16f2c4d9db5a637af2d216a01e943a91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ef99ed9fe35ce291a15d159857ab6d16f2c4d9db5a637af2d216a01e943a91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ef99ed9fe35ce291a15d159857ab6d16f2c4d9db5a637af2d216a01e943a91"}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ef99ed9fe35ce291a15d159857ab6d16f2c4d9db5a637af2d216a01e943a91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3ef99ed9fe35ce291a15d159857ab6d16f2c4d9db5a637af2d216a01e943a91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1"}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ef99ed9fe35ce291a15d159857ab6d16f2c4d9db5a637af2d216a01e943a91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ef99ed9fe35ce291a15d159857ab6d16f2c4d9db5a637af2d216a01e943a91"}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3ef99ed9fe35ce291a15d159857ab6d16f2c4d9db5a637af2d216a01e943a91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1"}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75"}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ef99ed9fe35ce291a15d159857ab6d16f2c4d9db5a637af2d216a01e943a91"}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1"}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d"}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d"}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d"}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40"}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40"}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76"}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8b64685eb4a662f9ad652fac20f37b47e4b320f2005709190c7771389578d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8b64685eb4a662f9ad652fac20f37b47e4b320f2005709190c7771389578d1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8b64685eb4a662f9ad652fac20f37b47e4b320f2005709190c7771389578d1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8b64685eb4a662f9ad652fac20f37b47e4b320f2005709190c7771389578d1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8b64685eb4a662f9ad652fac20f37b47e4b320f2005709190c7771389578d1f"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8b64685eb4a662f9ad652fac20f37b47e4b320f2005709190c7771389578d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8b64685eb4a662f9ad652fac20f37b47e4b320f2005709190c7771389578d1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8b64685eb4a662f9ad652fac20f37b47e4b320f2005709190c7771389578d1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8b64685eb4a662f9ad652fac20f37b47e4b320f2005709190c7771389578d1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8b64685eb4a662f9ad652fac20f37b47e4b320f2005709190c7771389578d1f"}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9"}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9"}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d"}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9"}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d"}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d"}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d"}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e"}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e"}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d"}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e"}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0634e0e82d33cb7cd4d97cb6544e6f74b48608f17a3fefe90622dd04141640a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0634e0e82d33cb7cd4d97cb6544e6f74b48608f17a3fefe90622dd04141640a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d"}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0634e0e82d33cb7cd4d97cb6544e6f74b48608f17a3fefe90622dd04141640a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0634e0e82d33cb7cd4d97cb6544e6f74b48608f17a3fefe90622dd04141640a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0634e0e82d33cb7cd4d97cb6544e6f74b48608f17a3fefe90622dd04141640a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0634e0e82d33cb7cd4d97cb6544e6f74b48608f17a3fefe90622dd04141640a"}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0634e0e82d33cb7cd4d97cb6544e6f74b48608f17a3fefe90622dd04141640a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0634e0e82d33cb7cd4d97cb6544e6f74b48608f17a3fefe90622dd04141640a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e"}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0634e0e82d33cb7cd4d97cb6544e6f74b48608f17a3fefe90622dd04141640a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0634e0e82d33cb7cd4d97cb6544e6f74b48608f17a3fefe90622dd04141640a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d"}
{"level":"info","ts":"2026-07-07T01:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0634e0e82d33cb7cd4d97cb6544e6f74b48608f17a3fefe90622dd04141640a"}
{"level":"debug","ts":"2026-07-07T01:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"}
{"level":"debug","ts":"2026-07-07T01:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"}
{"level":"debug","ts":"2026-07-07T01:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e"}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8b64685eb4a662f9ad652fac20f37b47e4b320f2005709190c7771389578d1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8b64685eb4a662f9ad652fac20f37b47e4b320f2005709190c7771389578d1f"}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d"}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1"}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75"}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d"}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d"}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b90cd04393e7bf40876f5bd7ef6e4ef43ed0e1a887480196725ef16b931f2e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3ef99ed9fe35ce291a15d159857ab6d16f2c4d9db5a637af2d216a01e943a91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d"}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b90cd04393e7bf40876f5bd7ef6e4ef43ed0e1a887480196725ef16b931f2e6"}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ef99ed9fe35ce291a15d159857ab6d16f2c4d9db5a637af2d216a01e943a91"}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d"}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0634e0e82d33cb7cd4d97cb6544e6f74b48608f17a3fefe90622dd04141640a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76"}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e46703253f9a29ea5f61e486a0a7d2dbe38b66e1121a2cab3c4ad8b641544d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0634e0e82d33cb7cd4d97cb6544e6f74b48608f17a3fefe90622dd04141640a"}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76"}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e46703253f9a29ea5f61e486a0a7d2dbe38b66e1121a2cab3c4ad8b641544d"}
{"level":"error","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76"}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T01:43:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444"}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa"}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76"}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9"}
{"level":"debug","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40"}
{"level":"info","ts":"2026-07-07T01:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"}
{"level":"info","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3bf1251-d31f-95e6-9040-4a305f235329","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42466","PortSpecifier":{"PortValue":42466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3bf1251-d31f-95e6-9040-4a305f235329","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3bf1251-d31f-95e6-9040-4a305f235329","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42466","PortSpecifier":{"PortValue":42466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388603,"nanos":453750789},"http":{"id":"e3bf1251-d31f-95e6-9040-4a305f235329","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3bf1251-d31f-95e6-9040-4a305f235329","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3bf1251-d31f-95e6-9040-4a305f235329","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3bf1251-d31f-95e6-9040-4a305f235329","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3bf1251-d31f-95e6-9040-4a305f235329","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3bf1251-d31f-95e6-9040-4a305f235329","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3bf1251-d31f-95e6-9040-4a305f235329","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3bf1251-d31f-95e6-9040-4a305f235329","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3bf1251-d31f-95e6-9040-4a305f235329","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3bf1251-d31f-95e6-9040-4a305f235329","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3bf1251-d31f-95e6-9040-4a305f235329","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3bf1251-d31f-95e6-9040-4a305f235329","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41aedf55-bce6-4852-81a2-a28643345566","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43512","PortSpecifier":{"PortValue":43512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41aedf55-bce6-4852-81a2-a28643345566","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41aedf55-bce6-4852-81a2-a28643345566","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43512","PortSpecifier":{"PortValue":43512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388603,"nanos":523565766},"http":{"id":"41aedf55-bce6-4852-81a2-a28643345566","method":"POST","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"41aedf55-bce6-4852-81a2-a28643345566","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41aedf55-bce6-4852-81a2-a28643345566","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41aedf55-bce6-4852-81a2-a28643345566","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41aedf55-bce6-4852-81a2-a28643345566","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41aedf55-bce6-4852-81a2-a28643345566","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41aedf55-bce6-4852-81a2-a28643345566","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-126d68/rate-test-model-126d68\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"41aedf55-bce6-4852-81a2-a28643345566","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41aedf55-bce6-4852-81a2-a28643345566","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41aedf55-bce6-4852-81a2-a28643345566","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41aedf55-bce6-4852-81a2-a28643345566","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41aedf55-bce6-4852-81a2-a28643345566","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42470","PortSpecifier":{"PortValue":42470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","method":"POST","path":"/ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6/v1/completions","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42470","PortSpecifier":{"PortValue":42470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388603,"nanos":569044217},"http":{"id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15wg2qm313S7RmYnr_5NmSXZ27M7RJvkMKNpFrPLSH5Ctgu0hYe0nKKDZWvmm"}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15wg2qm313S7RmYnr_5NmSXZ27M7RJvkMKNpFrPLSH5Ctgu0hYe0nKKDZWvmm\"}"}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fcfab073-04a0-49c2-b048-dce01365079c","keyName":"e2e-rate-a-241508","subscription":"e2e-rate-iso-a-241508","tenant":"e2e-shared-a-ced9d6","userId":"fcfab073-04a0-49c2-b048-dce01365079c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6\",\"requestedSubscription\":\"e2e-rate-iso-a-241508\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ced9d6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-241508","namespace":"ai-tenant-e2e-shared-a-ced9d6","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-241508"}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fcfab073-04a0-49c2-b048-dce01365079c","keyName":"e2e-rate-a-241508","selected_subscription":"e2e-rate-iso-a-241508","selected_subscription_key":"ai-tenant-e2e-shared-a-ced9d6/e2e-rate-iso-a-241508@ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ced9d6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-241508","namespace":"ai-tenant-e2e-shared-a-ced9d6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:43:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9583329d-7520-4cd3-b495-4a5bfd4e648e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42476","PortSpecifier":{"PortValue":42476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","method":"POST","path":"/ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6/v1/completions","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42476","PortSpecifier":{"PortValue":42476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388604,"nanos":635745828},"http":{"id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15wg2qm313S7RmYnr_5NmSXZ27M7RJvkMKNpFrPLSH5Ctgu0hYe0nKKDZWvmm"}
{"level":"debug","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15wg2qm313S7RmYnr_5NmSXZ27M7RJvkMKNpFrPLSH5Ctgu0hYe0nKKDZWvmm\"}"}
{"level":"debug","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fcfab073-04a0-49c2-b048-dce01365079c","keyName":"e2e-rate-a-241508","subscription":"e2e-rate-iso-a-241508","tenant":"e2e-shared-a-ced9d6","userId":"fcfab073-04a0-49c2-b048-dce01365079c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6\",\"requestedSubscription\":\"e2e-rate-iso-a-241508\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ced9d6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-241508","namespace":"ai-tenant-e2e-shared-a-ced9d6","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-241508"}
{"level":"debug","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fcfab073-04a0-49c2-b048-dce01365079c","keyName":"e2e-rate-a-241508","selected_subscription":"e2e-rate-iso-a-241508","selected_subscription_key":"ai-tenant-e2e-shared-a-ced9d6/e2e-rate-iso-a-241508@ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ced9d6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-241508","namespace":"ai-tenant-e2e-shared-a-ced9d6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:43:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"421b47f7-6491-4305-963a-e22ea3c4e9d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42478","PortSpecifier":{"PortValue":42478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23a36586-872d-4ce7-96cc-e40475fa199d","method":"POST","path":"/ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6/v1/completions","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42478","PortSpecifier":{"PortValue":42478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388605,"nanos":678402234},"http":{"id":"23a36586-872d-4ce7-96cc-e40475fa199d","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15wg2qm313S7RmYnr_5NmSXZ27M7RJvkMKNpFrPLSH5Ctgu0hYe0nKKDZWvmm"}
{"level":"debug","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15wg2qm313S7RmYnr_5NmSXZ27M7RJvkMKNpFrPLSH5Ctgu0hYe0nKKDZWvmm\"}"}
{"level":"debug","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fcfab073-04a0-49c2-b048-dce01365079c","keyName":"e2e-rate-a-241508","subscription":"e2e-rate-iso-a-241508","tenant":"e2e-shared-a-ced9d6","userId":"fcfab073-04a0-49c2-b048-dce01365079c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6\",\"requestedSubscription\":\"e2e-rate-iso-a-241508\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ced9d6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-241508","namespace":"ai-tenant-e2e-shared-a-ced9d6","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-241508"}
{"level":"debug","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fcfab073-04a0-49c2-b048-dce01365079c","keyName":"e2e-rate-a-241508","selected_subscription":"e2e-rate-iso-a-241508","selected_subscription_key":"ai-tenant-e2e-shared-a-ced9d6/e2e-rate-iso-a-241508@ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ced9d6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-241508","namespace":"ai-tenant-e2e-shared-a-ced9d6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:43:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23a36586-872d-4ce7-96cc-e40475fa199d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9a3be13-a256-4f38-a8d1-a04b77e28a3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43136","PortSpecifier":{"PortValue":43136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9a3be13-a256-4f38-a8d1-a04b77e28a3d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9a3be13-a256-4f38-a8d1-a04b77e28a3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43136","PortSpecifier":{"PortValue":43136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388618,"nanos":547850461},"http":{"id":"f9a3be13-a256-4f38-a8d1-a04b77e28a3d","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f9a3be13-a256-4f38-a8d1-a04b77e28a3d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9a3be13-a256-4f38-a8d1-a04b77e28a3d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9a3be13-a256-4f38-a8d1-a04b77e28a3d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9a3be13-a256-4f38-a8d1-a04b77e28a3d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9a3be13-a256-4f38-a8d1-a04b77e28a3d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9a3be13-a256-4f38-a8d1-a04b77e28a3d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f9a3be13-a256-4f38-a8d1-a04b77e28a3d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9a3be13-a256-4f38-a8d1-a04b77e28a3d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9a3be13-a256-4f38-a8d1-a04b77e28a3d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9a3be13-a256-4f38-a8d1-a04b77e28a3d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9a3be13-a256-4f38-a8d1-a04b77e28a3d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"510feac2-6ba4-4f95-b723-4b3fd2987211","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33744","PortSpecifier":{"PortValue":33744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"510feac2-6ba4-4f95-b723-4b3fd2987211","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"510feac2-6ba4-4f95-b723-4b3fd2987211","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33744","PortSpecifier":{"PortValue":33744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388618,"nanos":586510726},"http":{"id":"510feac2-6ba4-4f95-b723-4b3fd2987211","method":"POST","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"510feac2-6ba4-4f95-b723-4b3fd2987211","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"510feac2-6ba4-4f95-b723-4b3fd2987211","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea8adb05-c90a-465a-b621-26694ea60e08","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"]}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"510feac2-6ba4-4f95-b723-4b3fd2987211","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/412ab12725f8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=45961823-1ee2-4443-945a-f4a63084c9ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea8adb05-c90a-465a-b621-26694ea60e08","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"510feac2-6ba4-4f95-b723-4b3fd2987211","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"510feac2-6ba4-4f95-b723-4b3fd2987211","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"510feac2-6ba4-4f95-b723-4b3fd2987211","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-126d68/rate-test-model-126d68\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"510feac2-6ba4-4f95-b723-4b3fd2987211","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"510feac2-6ba4-4f95-b723-4b3fd2987211","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"510feac2-6ba4-4f95-b723-4b3fd2987211","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"510feac2-6ba4-4f95-b723-4b3fd2987211","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"510feac2-6ba4-4f95-b723-4b3fd2987211","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43144","PortSpecifier":{"PortValue":43144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","method":"POST","path":"/ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6/v1/completions","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43144","PortSpecifier":{"PortValue":43144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388618,"nanos":627995747},"http":{"id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WPOZ4USF0miAhF4m_7Kx3tr00nmP5DbHioOqhPCjRSwhyDGvf68hEQJ3VS0"}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WPOZ4USF0miAhF4m_7Kx3tr00nmP5DbHioOqhPCjRSwhyDGvf68hEQJ3VS0\"}"}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"030dad1e-f8c6-4c8b-86e0-919a6e1da9a6","keyName":"e2e-rate-a-cf4c53","subscription":"e2e-rate-iso-a-cf4c53","tenant":"e2e-shared-a-ced9d6","userId":"030dad1e-f8c6-4c8b-86e0-919a6e1da9a6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6\",\"requestedSubscription\":\"e2e-rate-iso-a-cf4c53\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ced9d6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf4c53","namespace":"ai-tenant-e2e-shared-a-ced9d6","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cf4c53"}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"030dad1e-f8c6-4c8b-86e0-919a6e1da9a6","keyName":"e2e-rate-a-cf4c53","selected_subscription":"e2e-rate-iso-a-cf4c53","selected_subscription_key":"ai-tenant-e2e-shared-a-ced9d6/e2e-rate-iso-a-cf4c53@ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ced9d6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf4c53","namespace":"ai-tenant-e2e-shared-a-ced9d6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:43:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b685a58a-d4d6-4db3-93f1-f5c95d6af22c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43156","PortSpecifier":{"PortValue":43156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","method":"POST","path":"/ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6/v1/completions","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43156","PortSpecifier":{"PortValue":43156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388619,"nanos":667240545},"http":{"id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WPOZ4USF0miAhF4m_7Kx3tr00nmP5DbHioOqhPCjRSwhyDGvf68hEQJ3VS0"}
{"level":"debug","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WPOZ4USF0miAhF4m_7Kx3tr00nmP5DbHioOqhPCjRSwhyDGvf68hEQJ3VS0\"}"}
{"level":"debug","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"030dad1e-f8c6-4c8b-86e0-919a6e1da9a6","keyName":"e2e-rate-a-cf4c53","subscription":"e2e-rate-iso-a-cf4c53","tenant":"e2e-shared-a-ced9d6","userId":"030dad1e-f8c6-4c8b-86e0-919a6e1da9a6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6\",\"requestedSubscription\":\"e2e-rate-iso-a-cf4c53\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ced9d6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf4c53","namespace":"ai-tenant-e2e-shared-a-ced9d6","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cf4c53"}
{"level":"debug","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"030dad1e-f8c6-4c8b-86e0-919a6e1da9a6","keyName":"e2e-rate-a-cf4c53","selected_subscription":"e2e-rate-iso-a-cf4c53","selected_subscription_key":"ai-tenant-e2e-shared-a-ced9d6/e2e-rate-iso-a-cf4c53@ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ced9d6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf4c53","namespace":"ai-tenant-e2e-shared-a-ced9d6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc7db0ae-de49-4b80-bf73-f75d5aa9eb5e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43172","PortSpecifier":{"PortValue":43172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","method":"POST","path":"/ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6/v1/completions","host":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43172","PortSpecifier":{"PortValue":43172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388620,"nanos":707196378},"http":{"id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","method":"POST","headers":{":authority":"e2e-shared-a-ced9d6.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WPOZ4USF0miAhF4m_7Kx3tr00nmP5DbHioOqhPCjRSwhyDGvf68hEQJ3VS0"}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WPOZ4USF0miAhF4m_7Kx3tr00nmP5DbHioOqhPCjRSwhyDGvf68hEQJ3VS0\"}"}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"030dad1e-f8c6-4c8b-86e0-919a6e1da9a6","keyName":"e2e-rate-a-cf4c53","subscription":"e2e-rate-iso-a-cf4c53","tenant":"e2e-shared-a-ced9d6","userId":"030dad1e-f8c6-4c8b-86e0-919a6e1da9a6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6\",\"requestedSubscription\":\"e2e-rate-iso-a-cf4c53\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ced9d6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ced9d6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf4c53","namespace":"ai-tenant-e2e-shared-a-ced9d6","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cf4c53"}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"030dad1e-f8c6-4c8b-86e0-919a6e1da9a6","keyName":"e2e-rate-a-cf4c53","selected_subscription":"e2e-rate-iso-a-cf4c53","selected_subscription_key":"ai-tenant-e2e-shared-a-ced9d6/e2e-rate-iso-a-cf4c53@ai-tenant-e2e-shared-a-ced9d6/rate-test-model-ced9d6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ced9d6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf4c53","namespace":"ai-tenant-e2e-shared-a-ced9d6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86cbaa0c-f247-496b-9dd1-9db2faf6ba86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33758","PortSpecifier":{"PortValue":33758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","method":"POST","path":"/ai-tenant-e2e-shared-b-126d68/rate-test-model-126d68/v1/completions","host":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33758","PortSpecifier":{"PortValue":33758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783388620,"nanos":743321024},"http":{"id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","method":"POST","headers":{":authority":"e2e-shared-b-126d68.apps.001942e4-15ec-41ce-9d0d-412ab12725f8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-126d68/rate-test-model-126d68/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d2TM0YepsncVeRNC_w0NDsI8OHn8lMs8DTLuX2UBdsC4IxRCk6JAdwfeDbrg"}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-126d68.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d2TM0YepsncVeRNC_w0NDsI8OHn8lMs8DTLuX2UBdsC4IxRCk6JAdwfeDbrg\"}"}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-126d68.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8f26b99-6f7d-40ac-8145-f6575960adc5","keyName":"e2e-rate-b-cf4c53","subscription":"e2e-rate-iso-b-cf4c53","tenant":"e2e-shared-b-126d68","userId":"c8f26b99-6f7d-40ac-8145-f6575960adc5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-126d68.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-126d68/rate-test-model-126d68\",\"requestedSubscription\":\"e2e-rate-iso-b-cf4c53\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-126d68.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-126d68","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-cf4c53","namespace":"ai-tenant-e2e-shared-b-126d68","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-126d68/rate-test-model-126d68\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-cf4c53"}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8f26b99-6f7d-40ac-8145-f6575960adc5","keyName":"e2e-rate-b-cf4c53","selected_subscription":"e2e-rate-iso-b-cf4c53","selected_subscription_key":"ai-tenant-e2e-shared-b-126d68/e2e-rate-iso-b-cf4c53@ai-tenant-e2e-shared-b-126d68/rate-test-model-126d68","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-126d68","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-cf4c53","namespace":"ai-tenant-e2e-shared-b-126d68","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T01:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3484cdb8-b6c0-4c15-bc97-b1df5c0423bf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T01:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de5d33666e718673ce6045eb9c440b2928bebb637840f1c1174d6610944fed53"}
{"level":"info","ts":"2026-07-07T01:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8cb85b24c1be10a7bfe22757f51c4de1ba373a4eaa2da59ce6b449c031c11f1"}
{"level":"info","ts":"2026-07-07T01:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8b64685eb4a662f9ad652fac20f37b47e4b320f2005709190c7771389578d1f"}
{"level":"info","ts":"2026-07-07T01:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7871ea1e9fafd78dffe6055a32d60ae62f1682e83a7507a27e2d5ae7b68670f9"}
{"level":"info","ts":"2026-07-07T01:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b90cd04393e7bf40876f5bd7ef6e4ef43ed0e1a887480196725ef16b931f2e6"}
{"level":"info","ts":"2026-07-07T01:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/013989949095ef252879dd4275e4c2a4e894d1e932c85a8330935a961206478e"}
{"level":"info","ts":"2026-07-07T01:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddf2a28ae19b50c36218b6336c4c4baa4577a5d15f9398b41e3f80d37736f12d"}
{"level":"info","ts":"2026-07-07T01:43:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7d42bf657dd6364bf5fe0622df01f488a1905c58dfe3f000da6fde68cc67f40"}
{"level":"info","ts":"2026-07-07T01:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3ef99ed9fe35ce291a15d159857ab6d16f2c4d9db5a637af2d216a01e943a91"}
{"level":"info","ts":"2026-07-07T01:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0634e0e82d33cb7cd4d97cb6544e6f74b48608f17a3fefe90622dd04141640a"}
{"level":"info","ts":"2026-07-07T01:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b825c8e6cce140600276a2e765cb6a687944ce44afd5ffe94309014f8f8b81d"}
{"level":"info","ts":"2026-07-07T01:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/543fa59dc1ee66ef5e449bf5c99760ee12403ac9b44e47e02c14619acb5553aa"}
{"level":"info","ts":"2026-07-07T01:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97fd65d03eaa609f9c7b56ef808b7bef258b6b35f21922216a13ca1619a81444"}
{"level":"info","ts":"2026-07-07T01:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5e800b81856fab49ffd581335d569a75da1e5e0d8d0351890ced5df63e14a7e"}
{"level":"info","ts":"2026-07-07T01:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4384b1f672147af30a4c7747e5c40b5fb101dbc2ce4a64deb40edd3689fcb76"}
{"level":"info","ts":"2026-07-07T01:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05768b1067f88a3784e62722bc7b638059a8a64636038479471b74ea7d8c4da0"}
{"level":"info","ts":"2026-07-07T01:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80bd2d29f844fc237cfacc437d003d8854bb03d0365f1f6d2a96213cfaf1cf75"}
{"level":"info","ts":"2026-07-07T01:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1274416879f95d3b13a2dd6017a960e2ad74c51f8ea7564137f5bef8de413c1d"}
{"level":"info","ts":"2026-07-07T01:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11e46703253f9a29ea5f61e486a0a7d2dbe38b66e1121a2cab3c4ad8b641544d"}
{"level":"info","ts":"2026-07-07T01:44:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a544d3eff141d59e96af7c383a9efd631e28028bb82d8ada7cd734732c8c8d31"}