--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22124c8b79df0edf946066402d21a79f3d5aad73bff5816990722e936c0b0029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22124c8b79df0edf946066402d21a79f3d5aad73bff5816990722e936c0b0029"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/055993e8413a325ed6cab506f53f4ba9c6b7fb1b4989f7b2976bfe1a07f6fcce"}
{"level":"info","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22124c8b79df0edf946066402d21a79f3d5aad73bff5816990722e936c0b0029","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003a14dc70f39ae1e25e9e0a798680ccf2129643a4ec8ee808d49848f581d57d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["003a14dc70f39ae1e25e9e0a798680ccf2129643a4ec8ee808d49848f581d57d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003a14dc70f39ae1e25e9e0a798680ccf2129643a4ec8ee808d49848f581d57d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"055993e8413a325ed6cab506f53f4ba9c6b7fb1b4989f7b2976bfe1a07f6fcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["055993e8413a325ed6cab506f53f4ba9c6b7fb1b4989f7b2976bfe1a07f6fcce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22124c8b79df0edf946066402d21a79f3d5aad73bff5816990722e936c0b0029"}
{"level":"info","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"055993e8413a325ed6cab506f53f4ba9c6b7fb1b4989f7b2976bfe1a07f6fcce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22124c8b79df0edf946066402d21a79f3d5aad73bff5816990722e936c0b0029","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003a14dc70f39ae1e25e9e0a798680ccf2129643a4ec8ee808d49848f581d57d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003a14dc70f39ae1e25e9e0a798680ccf2129643a4ec8ee808d49848f581d57d"}
{"level":"info","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003a14dc70f39ae1e25e9e0a798680ccf2129643a4ec8ee808d49848f581d57d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"055993e8413a325ed6cab506f53f4ba9c6b7fb1b4989f7b2976bfe1a07f6fcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"055993e8413a325ed6cab506f53f4ba9c6b7fb1b4989f7b2976bfe1a07f6fcce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"003a14dc70f39ae1e25e9e0a798680ccf2129643a4ec8ee808d49848f581d57d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["003a14dc70f39ae1e25e9e0a798680ccf2129643a4ec8ee808d49848f581d57d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/055993e8413a325ed6cab506f53f4ba9c6b7fb1b4989f7b2976bfe1a07f6fcce"}
{"level":"info","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"003a14dc70f39ae1e25e9e0a798680ccf2129643a4ec8ee808d49848f581d57d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"055993e8413a325ed6cab506f53f4ba9c6b7fb1b4989f7b2976bfe1a07f6fcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["055993e8413a325ed6cab506f53f4ba9c6b7fb1b4989f7b2976bfe1a07f6fcce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"055993e8413a325ed6cab506f53f4ba9c6b7fb1b4989f7b2976bfe1a07f6fcce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"003a14dc70f39ae1e25e9e0a798680ccf2129643a4ec8ee808d49848f581d57d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"055993e8413a325ed6cab506f53f4ba9c6b7fb1b4989f7b2976bfe1a07f6fcce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22124c8b79df0edf946066402d21a79f3d5aad73bff5816990722e936c0b0029"}
{"level":"info","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/003a14dc70f39ae1e25e9e0a798680ccf2129643a4ec8ee808d49848f581d57d"}
{"level":"info","ts":"2026-07-09T17:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/055993e8413a325ed6cab506f53f4ba9c6b7fb1b4989f7b2976bfe1a07f6fcce"}
{"level":"info","ts":"2026-07-09T17:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/003a14dc70f39ae1e25e9e0a798680ccf2129643a4ec8ee808d49848f581d57d"}
{"level":"info","ts":"2026-07-09T17:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ac02402d9e1b6d5c22155045efaa76a9660e081d1448e57dfcf51d78c4443ff"}
{"level":"info","ts":"2026-07-09T17:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1775c40729656d58095a96f714b86a7ac5f6634d3dde02642ae3a923c83fdd7"}
{"level":"info","ts":"2026-07-09T17:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d61fb79c2ee8ca28cf1222c41ffcb39402115394f9a339a97c69a455abe8c411"}
{"level":"info","ts":"2026-07-09T17:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c122b87ac61439ba9306db39eed1b0346ff7ec46c9c86f2753488a97f290d86d"}
{"level":"info","ts":"2026-07-09T17:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/055993e8413a325ed6cab506f53f4ba9c6b7fb1b4989f7b2976bfe1a07f6fcce"}
{"level":"info","ts":"2026-07-09T17:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22124c8b79df0edf946066402d21a79f3d5aad73bff5816990722e936c0b0029"}
{"level":"info","ts":"2026-07-09T17:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f60d14607ba344fd1f857aeb2591627154305cdd2abd7c42adffcaea5b51292"}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0"}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0"}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0"}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42672c82ef5c6a9007f86814430c2d37527371579757e8c8362495789c3e5003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2"}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42672c82ef5c6a9007f86814430c2d37527371579757e8c8362495789c3e5003","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42672c82ef5c6a9007f86814430c2d37527371579757e8c8362495789c3e5003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42672c82ef5c6a9007f86814430c2d37527371579757e8c8362495789c3e5003"}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42672c82ef5c6a9007f86814430c2d37527371579757e8c8362495789c3e5003","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42672c82ef5c6a9007f86814430c2d37527371579757e8c8362495789c3e5003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42672c82ef5c6a9007f86814430c2d37527371579757e8c8362495789c3e5003"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2"}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42672c82ef5c6a9007f86814430c2d37527371579757e8c8362495789c3e5003","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42672c82ef5c6a9007f86814430c2d37527371579757e8c8362495789c3e5003"}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42672c82ef5c6a9007f86814430c2d37527371579757e8c8362495789c3e5003","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2"}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42672c82ef5c6a9007f86814430c2d37527371579757e8c8362495789c3e5003"}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb"}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2"}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb"}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb"}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db"}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb"}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db"}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb"}
{"level":"error","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db"}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db"}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb"}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db"}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff"}
{"level":"debug","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff"}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff"}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff"}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4eda155a18ad868ac3a4972f9e25e6bd6c19ab63bfaf6fef47f1f480198b2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4eda155a18ad868ac3a4972f9e25e6bd6c19ab63bfaf6fef47f1f480198b2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6703dd21846e7945c6e6ec1e6581fb6eea4ff687f59d7766de46af8d2697d928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4eda155a18ad868ac3a4972f9e25e6bd6c19ab63bfaf6fef47f1f480198b2ae"}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6703dd21846e7945c6e6ec1e6581fb6eea4ff687f59d7766de46af8d2697d928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4eda155a18ad868ac3a4972f9e25e6bd6c19ab63bfaf6fef47f1f480198b2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4eda155a18ad868ac3a4972f9e25e6bd6c19ab63bfaf6fef47f1f480198b2ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6703dd21846e7945c6e6ec1e6581fb6eea4ff687f59d7766de46af8d2697d928"}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4eda155a18ad868ac3a4972f9e25e6bd6c19ab63bfaf6fef47f1f480198b2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6703dd21846e7945c6e6ec1e6581fb6eea4ff687f59d7766de46af8d2697d928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6703dd21846e7945c6e6ec1e6581fb6eea4ff687f59d7766de46af8d2697d928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6703dd21846e7945c6e6ec1e6581fb6eea4ff687f59d7766de46af8d2697d928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4eda155a18ad868ac3a4972f9e25e6bd6c19ab63bfaf6fef47f1f480198b2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4eda155a18ad868ac3a4972f9e25e6bd6c19ab63bfaf6fef47f1f480198b2ae"}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4eda155a18ad868ac3a4972f9e25e6bd6c19ab63bfaf6fef47f1f480198b2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6703dd21846e7945c6e6ec1e6581fb6eea4ff687f59d7766de46af8d2697d928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6703dd21846e7945c6e6ec1e6581fb6eea4ff687f59d7766de46af8d2697d928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4eda155a18ad868ac3a4972f9e25e6bd6c19ab63bfaf6fef47f1f480198b2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4eda155a18ad868ac3a4972f9e25e6bd6c19ab63bfaf6fef47f1f480198b2ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4eda155a18ad868ac3a4972f9e25e6bd6c19ab63bfaf6fef47f1f480198b2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6703dd21846e7945c6e6ec1e6581fb6eea4ff687f59d7766de46af8d2697d928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89a864c7f813e5331235665c084def8159ca4eb879c3e44869baedc548554d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6703dd21846e7945c6e6ec1e6581fb6eea4ff687f59d7766de46af8d2697d928"}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89a864c7f813e5331235665c084def8159ca4eb879c3e44869baedc548554d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4eda155a18ad868ac3a4972f9e25e6bd6c19ab63bfaf6fef47f1f480198b2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20c36649b5a0a5404f0205482703b724ed1a79f630f7e79e5edea52d3eac6068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20c36649b5a0a5404f0205482703b724ed1a79f630f7e79e5edea52d3eac6068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6703dd21846e7945c6e6ec1e6581fb6eea4ff687f59d7766de46af8d2697d928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6703dd21846e7945c6e6ec1e6581fb6eea4ff687f59d7766de46af8d2697d928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff"}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6703dd21846e7945c6e6ec1e6581fb6eea4ff687f59d7766de46af8d2697d928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89a864c7f813e5331235665c084def8159ca4eb879c3e44869baedc548554d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20c36649b5a0a5404f0205482703b724ed1a79f630f7e79e5edea52d3eac6068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6703dd21846e7945c6e6ec1e6581fb6eea4ff687f59d7766de46af8d2697d928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4eda155a18ad868ac3a4972f9e25e6bd6c19ab63bfaf6fef47f1f480198b2ae"}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89a864c7f813e5331235665c084def8159ca4eb879c3e44869baedc548554d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20c36649b5a0a5404f0205482703b724ed1a79f630f7e79e5edea52d3eac6068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a"}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89a864c7f813e5331235665c084def8159ca4eb879c3e44869baedc548554d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89a864c7f813e5331235665c084def8159ca4eb879c3e44869baedc548554d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20c36649b5a0a5404f0205482703b724ed1a79f630f7e79e5edea52d3eac6068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89a864c7f813e5331235665c084def8159ca4eb879c3e44869baedc548554d2"}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89a864c7f813e5331235665c084def8159ca4eb879c3e44869baedc548554d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a89a864c7f813e5331235665c084def8159ca4eb879c3e44869baedc548554d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20c36649b5a0a5404f0205482703b724ed1a79f630f7e79e5edea52d3eac6068"}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89a864c7f813e5331235665c084def8159ca4eb879c3e44869baedc548554d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89a864c7f813e5331235665c084def8159ca4eb879c3e44869baedc548554d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89a864c7f813e5331235665c084def8159ca4eb879c3e44869baedc548554d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20c36649b5a0a5404f0205482703b724ed1a79f630f7e79e5edea52d3eac6068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20c36649b5a0a5404f0205482703b724ed1a79f630f7e79e5edea52d3eac6068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6703dd21846e7945c6e6ec1e6581fb6eea4ff687f59d7766de46af8d2697d928"}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20c36649b5a0a5404f0205482703b724ed1a79f630f7e79e5edea52d3eac6068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20c36649b5a0a5404f0205482703b724ed1a79f630f7e79e5edea52d3eac6068","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a"}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89a864c7f813e5331235665c084def8159ca4eb879c3e44869baedc548554d2"}
{"level":"info","ts":"2026-07-09T17:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20c36649b5a0a5404f0205482703b724ed1a79f630f7e79e5edea52d3eac6068"}
{"level":"debug","ts":"2026-07-09T17:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d26e6cd9d4b62ca520af10395bae91b9572baf1e53663e515825a97bb4d3f3f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d26e6cd9d4b62ca520af10395bae91b9572baf1e53663e515825a97bb4d3f3f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d26e6cd9d4b62ca520af10395bae91b9572baf1e53663e515825a97bb4d3f3f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d26e6cd9d4b62ca520af10395bae91b9572baf1e53663e515825a97bb4d3f3f7"}
{"level":"debug","ts":"2026-07-09T17:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d26e6cd9d4b62ca520af10395bae91b9572baf1e53663e515825a97bb4d3f3f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d26e6cd9d4b62ca520af10395bae91b9572baf1e53663e515825a97bb4d3f3f7"}
{"level":"debug","ts":"2026-07-09T17:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d26e6cd9d4b62ca520af10395bae91b9572baf1e53663e515825a97bb4d3f3f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d26e6cd9d4b62ca520af10395bae91b9572baf1e53663e515825a97bb4d3f3f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d26e6cd9d4b62ca520af10395bae91b9572baf1e53663e515825a97bb4d3f3f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d26e6cd9d4b62ca520af10395bae91b9572baf1e53663e515825a97bb4d3f3f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d26e6cd9d4b62ca520af10395bae91b9572baf1e53663e515825a97bb4d3f3f7"}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e"}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d8644c6ed8856ad6680bb8203699814e3481cdaf8d6aeeab295a5e58db003a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d8644c6ed8856ad6680bb8203699814e3481cdaf8d6aeeab295a5e58db003a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d8644c6ed8856ad6680bb8203699814e3481cdaf8d6aeeab295a5e58db003a"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d8644c6ed8856ad6680bb8203699814e3481cdaf8d6aeeab295a5e58db003a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02d8644c6ed8856ad6680bb8203699814e3481cdaf8d6aeeab295a5e58db003a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d8644c6ed8856ad6680bb8203699814e3481cdaf8d6aeeab295a5e58db003a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d8644c6ed8856ad6680bb8203699814e3481cdaf8d6aeeab295a5e58db003a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d8644c6ed8856ad6680bb8203699814e3481cdaf8d6aeeab295a5e58db003a"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d8644c6ed8856ad6680bb8203699814e3481cdaf8d6aeeab295a5e58db003a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d8644c6ed8856ad6680bb8203699814e3481cdaf8d6aeeab295a5e58db003a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02d8644c6ed8856ad6680bb8203699814e3481cdaf8d6aeeab295a5e58db003a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d8644c6ed8856ad6680bb8203699814e3481cdaf8d6aeeab295a5e58db003a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d12a0dc0a6ef9a206b4ef34e8d6f9ee263013c45a804228133fc5cb81d9c588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d12a0dc0a6ef9a206b4ef34e8d6f9ee263013c45a804228133fc5cb81d9c588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d8644c6ed8856ad6680bb8203699814e3481cdaf8d6aeeab295a5e58db003a"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02d8644c6ed8856ad6680bb8203699814e3481cdaf8d6aeeab295a5e58db003a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd0f8e67ccf5e409499dec75e78587172189c45e7dabf464a0f6988e4b6d435c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd0f8e67ccf5e409499dec75e78587172189c45e7dabf464a0f6988e4b6d435c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d12a0dc0a6ef9a206b4ef34e8d6f9ee263013c45a804228133fc5cb81d9c588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d12a0dc0a6ef9a206b4ef34e8d6f9ee263013c45a804228133fc5cb81d9c588"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d12a0dc0a6ef9a206b4ef34e8d6f9ee263013c45a804228133fc5cb81d9c588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd0f8e67ccf5e409499dec75e78587172189c45e7dabf464a0f6988e4b6d435c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd0f8e67ccf5e409499dec75e78587172189c45e7dabf464a0f6988e4b6d435c"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd0f8e67ccf5e409499dec75e78587172189c45e7dabf464a0f6988e4b6d435c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d12a0dc0a6ef9a206b4ef34e8d6f9ee263013c45a804228133fc5cb81d9c588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d12a0dc0a6ef9a206b4ef34e8d6f9ee263013c45a804228133fc5cb81d9c588"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d12a0dc0a6ef9a206b4ef34e8d6f9ee263013c45a804228133fc5cb81d9c588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd0f8e67ccf5e409499dec75e78587172189c45e7dabf464a0f6988e4b6d435c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd0f8e67ccf5e409499dec75e78587172189c45e7dabf464a0f6988e4b6d435c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d8644c6ed8856ad6680bb8203699814e3481cdaf8d6aeeab295a5e58db003a"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd0f8e67ccf5e409499dec75e78587172189c45e7dabf464a0f6988e4b6d435c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d12a0dc0a6ef9a206b4ef34e8d6f9ee263013c45a804228133fc5cb81d9c588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd0f8e67ccf5e409499dec75e78587172189c45e7dabf464a0f6988e4b6d435c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d12a0dc0a6ef9a206b4ef34e8d6f9ee263013c45a804228133fc5cb81d9c588"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd0f8e67ccf5e409499dec75e78587172189c45e7dabf464a0f6988e4b6d435c"}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee"}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecdcd34e2717d3d015e9cb9ee670e9293749b82ab20ff40f7963e8daf02e1374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecdcd34e2717d3d015e9cb9ee670e9293749b82ab20ff40f7963e8daf02e1374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecdcd34e2717d3d015e9cb9ee670e9293749b82ab20ff40f7963e8daf02e1374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecdcd34e2717d3d015e9cb9ee670e9293749b82ab20ff40f7963e8daf02e1374","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee"}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecdcd34e2717d3d015e9cb9ee670e9293749b82ab20ff40f7963e8daf02e1374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecdcd34e2717d3d015e9cb9ee670e9293749b82ab20ff40f7963e8daf02e1374"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecdcd34e2717d3d015e9cb9ee670e9293749b82ab20ff40f7963e8daf02e1374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecdcd34e2717d3d015e9cb9ee670e9293749b82ab20ff40f7963e8daf02e1374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecdcd34e2717d3d015e9cb9ee670e9293749b82ab20ff40f7963e8daf02e1374"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecdcd34e2717d3d015e9cb9ee670e9293749b82ab20ff40f7963e8daf02e1374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecdcd34e2717d3d015e9cb9ee670e9293749b82ab20ff40f7963e8daf02e1374","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f"}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecdcd34e2717d3d015e9cb9ee670e9293749b82ab20ff40f7963e8daf02e1374"}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecdcd34e2717d3d015e9cb9ee670e9293749b82ab20ff40f7963e8daf02e1374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642"}
{"level":"error","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642"}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:43:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:43:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642"}
{"level":"info","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"234034cb-eabf-4597-b869-e1ac9205296d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42930","PortSpecifier":{"PortValue":42930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"234034cb-eabf-4597-b869-e1ac9205296d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"234034cb-eabf-4597-b869-e1ac9205296d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42930","PortSpecifier":{"PortValue":42930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619026,"nanos":252686062},"http":{"id":"234034cb-eabf-4597-b869-e1ac9205296d","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"234034cb-eabf-4597-b869-e1ac9205296d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"234034cb-eabf-4597-b869-e1ac9205296d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"234034cb-eabf-4597-b869-e1ac9205296d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"234034cb-eabf-4597-b869-e1ac9205296d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"234034cb-eabf-4597-b869-e1ac9205296d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"234034cb-eabf-4597-b869-e1ac9205296d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/auth-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"234034cb-eabf-4597-b869-e1ac9205296d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"234034cb-eabf-4597-b869-e1ac9205296d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"234034cb-eabf-4597-b869-e1ac9205296d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"234034cb-eabf-4597-b869-e1ac9205296d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"234034cb-eabf-4597-b869-e1ac9205296d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fafd839-1ad5-4a6a-82ec-c2eac1f9cd90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34420","PortSpecifier":{"PortValue":34420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6fafd839-1ad5-4a6a-82ec-c2eac1f9cd90","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fafd839-1ad5-4a6a-82ec-c2eac1f9cd90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34420","PortSpecifier":{"PortValue":34420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619026,"nanos":315325120},"http":{"id":"6fafd839-1ad5-4a6a-82ec-c2eac1f9cd90","method":"POST","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6fafd839-1ad5-4a6a-82ec-c2eac1f9cd90","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6fafd839-1ad5-4a6a-82ec-c2eac1f9cd90","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6fafd839-1ad5-4a6a-82ec-c2eac1f9cd90","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fafd839-1ad5-4a6a-82ec-c2eac1f9cd90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fafd839-1ad5-4a6a-82ec-c2eac1f9cd90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fafd839-1ad5-4a6a-82ec-c2eac1f9cd90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f62372/auth-test-model-f62372\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6fafd839-1ad5-4a6a-82ec-c2eac1f9cd90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fafd839-1ad5-4a6a-82ec-c2eac1f9cd90","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fafd839-1ad5-4a6a-82ec-c2eac1f9cd90","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fafd839-1ad5-4a6a-82ec-c2eac1f9cd90","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fafd839-1ad5-4a6a-82ec-c2eac1f9cd90","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3a9592b-d96d-9e5d-ad63-703519e5789e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42938","PortSpecifier":{"PortValue":42938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3a9592b-d96d-9e5d-ad63-703519e5789e","method":"GET","path":"/maas-api/v1/api-keys/a0e420ed-e2f8-4efc-9382-277dea3a2ee3","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3a9592b-d96d-9e5d-ad63-703519e5789e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42938","PortSpecifier":{"PortValue":42938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619026,"nanos":383477026},"http":{"id":"b3a9592b-d96d-9e5d-ad63-703519e5789e","method":"GET","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a0e420ed-e2f8-4efc-9382-277dea3a2ee3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3a9592b-d96d-9e5d-ad63-703519e5789e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3a9592b-d96d-9e5d-ad63-703519e5789e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3a9592b-d96d-9e5d-ad63-703519e5789e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a0e420ed-e2f8-4efc-9382-277dea3a2ee3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3a9592b-d96d-9e5d-ad63-703519e5789e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3a9592b-d96d-9e5d-ad63-703519e5789e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3a9592b-d96d-9e5d-ad63-703519e5789e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/auth-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3a9592b-d96d-9e5d-ad63-703519e5789e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3a9592b-d96d-9e5d-ad63-703519e5789e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3a9592b-d96d-9e5d-ad63-703519e5789e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3a9592b-d96d-9e5d-ad63-703519e5789e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3a9592b-d96d-9e5d-ad63-703519e5789e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1205602a-2006-44b1-9d8b-93b8476338de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34428","PortSpecifier":{"PortValue":34428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1205602a-2006-44b1-9d8b-93b8476338de","method":"GET","path":"/maas-api/v1/api-keys/a79f3b6f-4949-42b8-8d9f-18ded4a0279b","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1205602a-2006-44b1-9d8b-93b8476338de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34428","PortSpecifier":{"PortValue":34428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619026,"nanos":424535280},"http":{"id":"1205602a-2006-44b1-9d8b-93b8476338de","method":"GET","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a79f3b6f-4949-42b8-8d9f-18ded4a0279b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1205602a-2006-44b1-9d8b-93b8476338de","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1205602a-2006-44b1-9d8b-93b8476338de","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1205602a-2006-44b1-9d8b-93b8476338de","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a79f3b6f-4949-42b8-8d9f-18ded4a0279b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1205602a-2006-44b1-9d8b-93b8476338de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1205602a-2006-44b1-9d8b-93b8476338de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1205602a-2006-44b1-9d8b-93b8476338de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f62372/auth-test-model-f62372\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1205602a-2006-44b1-9d8b-93b8476338de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1205602a-2006-44b1-9d8b-93b8476338de","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1205602a-2006-44b1-9d8b-93b8476338de","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1205602a-2006-44b1-9d8b-93b8476338de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:43:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1205602a-2006-44b1-9d8b-93b8476338de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f706a483-9b88-4493-9f7e-ae3ce95f743d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39418","PortSpecifier":{"PortValue":39418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f706a483-9b88-4493-9f7e-ae3ce95f743d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f706a483-9b88-4493-9f7e-ae3ce95f743d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39418","PortSpecifier":{"PortValue":39418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619045,"nanos":769582482},"http":{"id":"f706a483-9b88-4493-9f7e-ae3ce95f743d","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f706a483-9b88-4493-9f7e-ae3ce95f743d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f706a483-9b88-4493-9f7e-ae3ce95f743d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f706a483-9b88-4493-9f7e-ae3ce95f743d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f706a483-9b88-4493-9f7e-ae3ce95f743d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f706a483-9b88-4493-9f7e-ae3ce95f743d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f706a483-9b88-4493-9f7e-ae3ce95f743d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/auth-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f706a483-9b88-4493-9f7e-ae3ce95f743d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f706a483-9b88-4493-9f7e-ae3ce95f743d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f706a483-9b88-4493-9f7e-ae3ce95f743d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f706a483-9b88-4493-9f7e-ae3ce95f743d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f706a483-9b88-4493-9f7e-ae3ce95f743d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89d25e77-4453-4c3d-ab86-a2ba8b295461","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39220","PortSpecifier":{"PortValue":39220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89d25e77-4453-4c3d-ab86-a2ba8b295461","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89d25e77-4453-4c3d-ab86-a2ba8b295461","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39220","PortSpecifier":{"PortValue":39220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619045,"nanos":812815896},"http":{"id":"89d25e77-4453-4c3d-ab86-a2ba8b295461","method":"POST","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89d25e77-4453-4c3d-ab86-a2ba8b295461","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89d25e77-4453-4c3d-ab86-a2ba8b295461","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89d25e77-4453-4c3d-ab86-a2ba8b295461","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89d25e77-4453-4c3d-ab86-a2ba8b295461","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89d25e77-4453-4c3d-ab86-a2ba8b295461","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89d25e77-4453-4c3d-ab86-a2ba8b295461","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f62372/auth-test-model-f62372\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89d25e77-4453-4c3d-ab86-a2ba8b295461","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89d25e77-4453-4c3d-ab86-a2ba8b295461","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89d25e77-4453-4c3d-ab86-a2ba8b295461","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89d25e77-4453-4c3d-ab86-a2ba8b295461","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89d25e77-4453-4c3d-ab86-a2ba8b295461","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39424","PortSpecifier":{"PortValue":39424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39424","PortSpecifier":{"PortValue":39424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619045,"nanos":852085621},"http":{"id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","method":"GET","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18K8DYxXPN4rGzqoe_Iq1MUFS31sPdrH6BnuywmgqENCG2pYa1f0pdLzV3rSK"}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18K8DYxXPN4rGzqoe_Iq1MUFS31sPdrH6BnuywmgqENCG2pYa1f0pdLzV3rSK\"}"}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5e317812-3a12-472d-9e7f-3047c921f9c6","keyName":"e2e-auth-iso-a-3041b6","subscription":"e2e-auth-iso-f91284","tenant":"e2e-shared-a-77a679","userId":"5e317812-3a12-472d-9e7f-3047c921f9c6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/auth-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f91284"}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:44:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e11b933a-8996-4e37-bd49-ba6819a2cbac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd4ea8ac-3bc7-480e-934c-285425010a6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38014","PortSpecifier":{"PortValue":38014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd4ea8ac-3bc7-480e-934c-285425010a6a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd4ea8ac-3bc7-480e-934c-285425010a6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38014","PortSpecifier":{"PortValue":38014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619063,"nanos":193478187},"http":{"id":"dd4ea8ac-3bc7-480e-934c-285425010a6a","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd4ea8ac-3bc7-480e-934c-285425010a6a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd4ea8ac-3bc7-480e-934c-285425010a6a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd4ea8ac-3bc7-480e-934c-285425010a6a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd4ea8ac-3bc7-480e-934c-285425010a6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd4ea8ac-3bc7-480e-934c-285425010a6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd4ea8ac-3bc7-480e-934c-285425010a6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/auth-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd4ea8ac-3bc7-480e-934c-285425010a6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd4ea8ac-3bc7-480e-934c-285425010a6a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd4ea8ac-3bc7-480e-934c-285425010a6a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd4ea8ac-3bc7-480e-934c-285425010a6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd4ea8ac-3bc7-480e-934c-285425010a6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06fd0f52-fc2b-4f7d-bff0-ae5d4ed62fed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48610","PortSpecifier":{"PortValue":48610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06fd0f52-fc2b-4f7d-bff0-ae5d4ed62fed","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06fd0f52-fc2b-4f7d-bff0-ae5d4ed62fed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48610","PortSpecifier":{"PortValue":48610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619063,"nanos":238659802},"http":{"id":"06fd0f52-fc2b-4f7d-bff0-ae5d4ed62fed","method":"POST","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06fd0f52-fc2b-4f7d-bff0-ae5d4ed62fed","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06fd0f52-fc2b-4f7d-bff0-ae5d4ed62fed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06fd0f52-fc2b-4f7d-bff0-ae5d4ed62fed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06fd0f52-fc2b-4f7d-bff0-ae5d4ed62fed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06fd0f52-fc2b-4f7d-bff0-ae5d4ed62fed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06fd0f52-fc2b-4f7d-bff0-ae5d4ed62fed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f62372/auth-test-model-f62372\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06fd0f52-fc2b-4f7d-bff0-ae5d4ed62fed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06fd0f52-fc2b-4f7d-bff0-ae5d4ed62fed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06fd0f52-fc2b-4f7d-bff0-ae5d4ed62fed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06fd0f52-fc2b-4f7d-bff0-ae5d4ed62fed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06fd0f52-fc2b-4f7d-bff0-ae5d4ed62fed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68f71fea-7c98-4253-8afc-2bfb0d0d57fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48614","PortSpecifier":{"PortValue":48614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68f71fea-7c98-4253-8afc-2bfb0d0d57fb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68f71fea-7c98-4253-8afc-2bfb0d0d57fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48614","PortSpecifier":{"PortValue":48614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619063,"nanos":281554465},"http":{"id":"68f71fea-7c98-4253-8afc-2bfb0d0d57fb","method":"GET","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68f71fea-7c98-4253-8afc-2bfb0d0d57fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vAVOmtoF3fy0gawK_LFhy21Zj3dYaqz1bNyXRHmp283aZJWCLbb0vnHktLio"}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"68f71fea-7c98-4253-8afc-2bfb0d0d57fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f62372.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vAVOmtoF3fy0gawK_LFhy21Zj3dYaqz1bNyXRHmp283aZJWCLbb0vnHktLio\"}"}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"68f71fea-7c98-4253-8afc-2bfb0d0d57fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f62372.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68f71fea-7c98-4253-8afc-2bfb0d0d57fb","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68f71fea-7c98-4253-8afc-2bfb0d0d57fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"68f71fea-7c98-4253-8afc-2bfb0d0d57fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68f71fea-7c98-4253-8afc-2bfb0d0d57fb","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-09T17:44:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68f71fea-7c98-4253-8afc-2bfb0d0d57fb","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"341f31ac-a9e1-41c8-bc5f-53191db5444a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43180","PortSpecifier":{"PortValue":43180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"341f31ac-a9e1-41c8-bc5f-53191db5444a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"341f31ac-a9e1-41c8-bc5f-53191db5444a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43180","PortSpecifier":{"PortValue":43180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619078,"nanos":597140344},"http":{"id":"341f31ac-a9e1-41c8-bc5f-53191db5444a","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"341f31ac-a9e1-41c8-bc5f-53191db5444a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"341f31ac-a9e1-41c8-bc5f-53191db5444a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"341f31ac-a9e1-41c8-bc5f-53191db5444a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"341f31ac-a9e1-41c8-bc5f-53191db5444a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"341f31ac-a9e1-41c8-bc5f-53191db5444a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"341f31ac-a9e1-41c8-bc5f-53191db5444a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/auth-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"341f31ac-a9e1-41c8-bc5f-53191db5444a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"341f31ac-a9e1-41c8-bc5f-53191db5444a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"341f31ac-a9e1-41c8-bc5f-53191db5444a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"341f31ac-a9e1-41c8-bc5f-53191db5444a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"341f31ac-a9e1-41c8-bc5f-53191db5444a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9bc746b-771b-4063-8794-6d4a7edc570e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36846","PortSpecifier":{"PortValue":36846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9bc746b-771b-4063-8794-6d4a7edc570e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9bc746b-771b-4063-8794-6d4a7edc570e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36846","PortSpecifier":{"PortValue":36846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619078,"nanos":634406278},"http":{"id":"b9bc746b-771b-4063-8794-6d4a7edc570e","method":"POST","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9bc746b-771b-4063-8794-6d4a7edc570e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9bc746b-771b-4063-8794-6d4a7edc570e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9bc746b-771b-4063-8794-6d4a7edc570e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9bc746b-771b-4063-8794-6d4a7edc570e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9bc746b-771b-4063-8794-6d4a7edc570e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9bc746b-771b-4063-8794-6d4a7edc570e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f62372/auth-test-model-f62372\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9bc746b-771b-4063-8794-6d4a7edc570e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9bc746b-771b-4063-8794-6d4a7edc570e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9bc746b-771b-4063-8794-6d4a7edc570e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9bc746b-771b-4063-8794-6d4a7edc570e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9bc746b-771b-4063-8794-6d4a7edc570e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"508a1a46-2cce-46e8-a5b3-0358267e466f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43184","PortSpecifier":{"PortValue":43184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"508a1a46-2cce-46e8-a5b3-0358267e466f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"508a1a46-2cce-46e8-a5b3-0358267e466f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43184","PortSpecifier":{"PortValue":43184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619078,"nanos":674152109},"http":{"id":"508a1a46-2cce-46e8-a5b3-0358267e466f","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"508a1a46-2cce-46e8-a5b3-0358267e466f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"508a1a46-2cce-46e8-a5b3-0358267e466f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"508a1a46-2cce-46e8-a5b3-0358267e466f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"508a1a46-2cce-46e8-a5b3-0358267e466f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"508a1a46-2cce-46e8-a5b3-0358267e466f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"508a1a46-2cce-46e8-a5b3-0358267e466f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/auth-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"508a1a46-2cce-46e8-a5b3-0358267e466f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"508a1a46-2cce-46e8-a5b3-0358267e466f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"508a1a46-2cce-46e8-a5b3-0358267e466f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"508a1a46-2cce-46e8-a5b3-0358267e466f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"508a1a46-2cce-46e8-a5b3-0358267e466f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c85efac5-9c9e-48f4-ba12-9d45c6245131","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36860","PortSpecifier":{"PortValue":36860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c85efac5-9c9e-48f4-ba12-9d45c6245131","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c85efac5-9c9e-48f4-ba12-9d45c6245131","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36860","PortSpecifier":{"PortValue":36860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619078,"nanos":713494926},"http":{"id":"c85efac5-9c9e-48f4-ba12-9d45c6245131","method":"POST","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c85efac5-9c9e-48f4-ba12-9d45c6245131","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c85efac5-9c9e-48f4-ba12-9d45c6245131","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c85efac5-9c9e-48f4-ba12-9d45c6245131","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c85efac5-9c9e-48f4-ba12-9d45c6245131","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c85efac5-9c9e-48f4-ba12-9d45c6245131","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c85efac5-9c9e-48f4-ba12-9d45c6245131","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f62372/auth-test-model-f62372\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c85efac5-9c9e-48f4-ba12-9d45c6245131","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c85efac5-9c9e-48f4-ba12-9d45c6245131","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c85efac5-9c9e-48f4-ba12-9d45c6245131","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c85efac5-9c9e-48f4-ba12-9d45c6245131","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:44:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c85efac5-9c9e-48f4-ba12-9d45c6245131","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb493c59-25cf-4364-9d06-256127a804f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42744","PortSpecifier":{"PortValue":42744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb493c59-25cf-4364-9d06-256127a804f8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb493c59-25cf-4364-9d06-256127a804f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42744","PortSpecifier":{"PortValue":42744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619098,"nanos":217035486},"http":{"id":"cb493c59-25cf-4364-9d06-256127a804f8","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cb493c59-25cf-4364-9d06-256127a804f8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb493c59-25cf-4364-9d06-256127a804f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb493c59-25cf-4364-9d06-256127a804f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb493c59-25cf-4364-9d06-256127a804f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb493c59-25cf-4364-9d06-256127a804f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb493c59-25cf-4364-9d06-256127a804f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/auth-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb493c59-25cf-4364-9d06-256127a804f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb493c59-25cf-4364-9d06-256127a804f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb493c59-25cf-4364-9d06-256127a804f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb493c59-25cf-4364-9d06-256127a804f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb493c59-25cf-4364-9d06-256127a804f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d882caaf-da14-4424-9e4e-62e75c5e4ea2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37406","PortSpecifier":{"PortValue":37406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d882caaf-da14-4424-9e4e-62e75c5e4ea2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d882caaf-da14-4424-9e4e-62e75c5e4ea2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37406","PortSpecifier":{"PortValue":37406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619098,"nanos":254518639},"http":{"id":"d882caaf-da14-4424-9e4e-62e75c5e4ea2","method":"POST","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d882caaf-da14-4424-9e4e-62e75c5e4ea2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d882caaf-da14-4424-9e4e-62e75c5e4ea2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d882caaf-da14-4424-9e4e-62e75c5e4ea2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d882caaf-da14-4424-9e4e-62e75c5e4ea2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d882caaf-da14-4424-9e4e-62e75c5e4ea2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d882caaf-da14-4424-9e4e-62e75c5e4ea2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f62372/auth-test-model-f62372\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d882caaf-da14-4424-9e4e-62e75c5e4ea2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d882caaf-da14-4424-9e4e-62e75c5e4ea2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d882caaf-da14-4424-9e4e-62e75c5e4ea2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d882caaf-da14-4424-9e4e-62e75c5e4ea2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d882caaf-da14-4424-9e4e-62e75c5e4ea2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c65fb809-af67-4c2a-8148-bf65f64ac02e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37420","PortSpecifier":{"PortValue":37420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c65fb809-af67-4c2a-8148-bf65f64ac02e","method":"GET","path":"/maas-api/v1/api-keys/79a69713-0bcb-4bdc-bb87-56ac1e8009bb","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c65fb809-af67-4c2a-8148-bf65f64ac02e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37420","PortSpecifier":{"PortValue":37420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619098,"nanos":295087630},"http":{"id":"c65fb809-af67-4c2a-8148-bf65f64ac02e","method":"GET","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/79a69713-0bcb-4bdc-bb87-56ac1e8009bb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c65fb809-af67-4c2a-8148-bf65f64ac02e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c65fb809-af67-4c2a-8148-bf65f64ac02e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c65fb809-af67-4c2a-8148-bf65f64ac02e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/79a69713-0bcb-4bdc-bb87-56ac1e8009bb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65fb809-af67-4c2a-8148-bf65f64ac02e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65fb809-af67-4c2a-8148-bf65f64ac02e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65fb809-af67-4c2a-8148-bf65f64ac02e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f62372/auth-test-model-f62372\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c65fb809-af67-4c2a-8148-bf65f64ac02e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65fb809-af67-4c2a-8148-bf65f64ac02e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65fb809-af67-4c2a-8148-bf65f64ac02e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c65fb809-af67-4c2a-8148-bf65f64ac02e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c65fb809-af67-4c2a-8148-bf65f64ac02e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e489ec8f-795f-4a51-a5b5-88f2fff69db8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42754","PortSpecifier":{"PortValue":42754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e489ec8f-795f-4a51-a5b5-88f2fff69db8","method":"GET","path":"/maas-api/v1/api-keys/79a69713-0bcb-4bdc-bb87-56ac1e8009bb","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e489ec8f-795f-4a51-a5b5-88f2fff69db8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42754","PortSpecifier":{"PortValue":42754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619098,"nanos":332945952},"http":{"id":"e489ec8f-795f-4a51-a5b5-88f2fff69db8","method":"GET","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/79a69713-0bcb-4bdc-bb87-56ac1e8009bb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e489ec8f-795f-4a51-a5b5-88f2fff69db8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e489ec8f-795f-4a51-a5b5-88f2fff69db8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e489ec8f-795f-4a51-a5b5-88f2fff69db8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/79a69713-0bcb-4bdc-bb87-56ac1e8009bb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e489ec8f-795f-4a51-a5b5-88f2fff69db8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e489ec8f-795f-4a51-a5b5-88f2fff69db8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e489ec8f-795f-4a51-a5b5-88f2fff69db8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/auth-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e489ec8f-795f-4a51-a5b5-88f2fff69db8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e489ec8f-795f-4a51-a5b5-88f2fff69db8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e489ec8f-795f-4a51-a5b5-88f2fff69db8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e489ec8f-795f-4a51-a5b5-88f2fff69db8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:44:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e489ec8f-795f-4a51-a5b5-88f2fff69db8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5482aad3-b93f-408c-a54c-264cb3411762","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47250","PortSpecifier":{"PortValue":47250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5482aad3-b93f-408c-a54c-264cb3411762","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5482aad3-b93f-408c-a54c-264cb3411762","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47250","PortSpecifier":{"PortValue":47250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619115,"nanos":778394927},"http":{"id":"5482aad3-b93f-408c-a54c-264cb3411762","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5482aad3-b93f-408c-a54c-264cb3411762","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5482aad3-b93f-408c-a54c-264cb3411762","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5482aad3-b93f-408c-a54c-264cb3411762","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5482aad3-b93f-408c-a54c-264cb3411762","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5482aad3-b93f-408c-a54c-264cb3411762","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5482aad3-b93f-408c-a54c-264cb3411762","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/auth-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5482aad3-b93f-408c-a54c-264cb3411762","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5482aad3-b93f-408c-a54c-264cb3411762","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5482aad3-b93f-408c-a54c-264cb3411762","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5482aad3-b93f-408c-a54c-264cb3411762","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5482aad3-b93f-408c-a54c-264cb3411762","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2e9e5fc-731e-46da-acfe-46b18771f1fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56756","PortSpecifier":{"PortValue":56756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2e9e5fc-731e-46da-acfe-46b18771f1fe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2e9e5fc-731e-46da-acfe-46b18771f1fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56756","PortSpecifier":{"PortValue":56756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619115,"nanos":812802102},"http":{"id":"d2e9e5fc-731e-46da-acfe-46b18771f1fe","method":"POST","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d2e9e5fc-731e-46da-acfe-46b18771f1fe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2e9e5fc-731e-46da-acfe-46b18771f1fe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2e9e5fc-731e-46da-acfe-46b18771f1fe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2e9e5fc-731e-46da-acfe-46b18771f1fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2e9e5fc-731e-46da-acfe-46b18771f1fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2e9e5fc-731e-46da-acfe-46b18771f1fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f62372/auth-test-model-f62372\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d2e9e5fc-731e-46da-acfe-46b18771f1fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2e9e5fc-731e-46da-acfe-46b18771f1fe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2e9e5fc-731e-46da-acfe-46b18771f1fe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2e9e5fc-731e-46da-acfe-46b18771f1fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2e9e5fc-731e-46da-acfe-46b18771f1fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47258","PortSpecifier":{"PortValue":47258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47258","PortSpecifier":{"PortValue":47258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619115,"nanos":847546719},"http":{"id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-roB5izEJp5YSoUYD_8eWRJOlw66nUCB239uK9rJqstPT1qYIZ8HSch4cIUyC"}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-roB5izEJp5YSoUYD_8eWRJOlw66nUCB239uK9rJqstPT1qYIZ8HSch4cIUyC\"}"}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"425f9d13-b549-4805-a279-278c27f1062d","keyName":"e2e-auth-iso-a-b767eb","subscription":"e2e-auth-iso-f7ee9e","tenant":"e2e-shared-a-77a679","userId":"425f9d13-b549-4805-a279-278c27f1062d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/auth-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f7ee9e"}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:45:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5f1b0e0-0c0a-470e-8334-4ffcc0b4e166","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02d8644c6ed8856ad6680bb8203699814e3481cdaf8d6aeeab295a5e58db003a"}
{"level":"info","ts":"2026-07-09T17:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a89a864c7f813e5331235665c084def8159ca4eb879c3e44869baedc548554d2"}
{"level":"info","ts":"2026-07-09T17:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e73da99e07f87cd61baf774304f161cc8d6ec8e24359528bc8f58c0143d4f24"}
{"level":"info","ts":"2026-07-09T17:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6703dd21846e7945c6e6ec1e6581fb6eea4ff687f59d7766de46af8d2697d928"}
{"level":"info","ts":"2026-07-09T17:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e2da909351919ef422d07e0e3dad1b58ff14c9b621eb6d77ce950d6f0a4edee"}
{"level":"info","ts":"2026-07-09T17:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd0f8e67ccf5e409499dec75e78587172189c45e7dabf464a0f6988e4b6d435c"}
{"level":"info","ts":"2026-07-09T17:45:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fde6975a0e43cdd9cc6b3acfee703a59c402966bf02cd1f2edecc11aa90dc642"}
{"level":"info","ts":"2026-07-09T17:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20c36649b5a0a5404f0205482703b724ed1a79f630f7e79e5edea52d3eac6068"}
{"level":"info","ts":"2026-07-09T17:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4eda155a18ad868ac3a4972f9e25e6bd6c19ab63bfaf6fef47f1f480198b2ae"}
{"level":"info","ts":"2026-07-09T17:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86f35c6b8dcce4632be5134853f8fff911abd8c21bc376d36e290d3be6ebf5ff"}
{"level":"info","ts":"2026-07-09T17:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d12a0dc0a6ef9a206b4ef34e8d6f9ee263013c45a804228133fc5cb81d9c588"}
{"level":"info","ts":"2026-07-09T17:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/568c9323e91b4c67c2ab794e94040f528bbcc013591663dbbbb3789a434cf69e"}
{"level":"info","ts":"2026-07-09T17:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df43e0734bdf3e2c9952dced2b23c97795806abc5909fb75253775ff779629db"}
{"level":"info","ts":"2026-07-09T17:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42672c82ef5c6a9007f86814430c2d37527371579757e8c8362495789c3e5003"}
{"level":"info","ts":"2026-07-09T17:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecdcd34e2717d3d015e9cb9ee670e9293749b82ab20ff40f7963e8daf02e1374"}
{"level":"info","ts":"2026-07-09T17:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0523f9181afeb53f0f1a493434658442699c832df26a5f4a896c6592c6925ebb"}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec"}
{"level":"info","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec"}
{"level":"info","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec"}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec"}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec"}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec"}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec"}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec"}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3"}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3"}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3"}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32"}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3"}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32"}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3"}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32"}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3"}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa"}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa"}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa"}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543"}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543"}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543"}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9"}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543"}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9"}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543"}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9"}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc66eda2d11eaf383d81871b064f9509d216f4812d72be2465a8808a9d5d0d29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc66eda2d11eaf383d81871b064f9509d216f4812d72be2465a8808a9d5d0d29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc66eda2d11eaf383d81871b064f9509d216f4812d72be2465a8808a9d5d0d29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc66eda2d11eaf383d81871b064f9509d216f4812d72be2465a8808a9d5d0d29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc66eda2d11eaf383d81871b064f9509d216f4812d72be2465a8808a9d5d0d29"}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc66eda2d11eaf383d81871b064f9509d216f4812d72be2465a8808a9d5d0d29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc66eda2d11eaf383d81871b064f9509d216f4812d72be2465a8808a9d5d0d29"}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc66eda2d11eaf383d81871b064f9509d216f4812d72be2465a8808a9d5d0d29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc66eda2d11eaf383d81871b064f9509d216f4812d72be2465a8808a9d5d0d29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc66eda2d11eaf383d81871b064f9509d216f4812d72be2465a8808a9d5d0d29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc66eda2d11eaf383d81871b064f9509d216f4812d72be2465a8808a9d5d0d29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc66eda2d11eaf383d81871b064f9509d216f4812d72be2465a8808a9d5d0d29"}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"}
{"level":"debug","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b"}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b"}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd"}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c"}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd"}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c"}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd"}
{"level":"error","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c"}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c"}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512"}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c"}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512"}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512"}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6"}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6"}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630"}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630"}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:45:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630"}
{"level":"info","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"}
{"level":"info","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5778fc86d1fa08180585bc121063172f1311f14429302386df2cbe0e10feec8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630"}
{"level":"info","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5778fc86d1fa08180585bc121063172f1311f14429302386df2cbe0e10feec8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"}
{"level":"info","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5778fc86d1fa08180585bc121063172f1311f14429302386df2cbe0e10feec8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5778fc86d1fa08180585bc121063172f1311f14429302386df2cbe0e10feec8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5778fc86d1fa08180585bc121063172f1311f14429302386df2cbe0e10feec8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5778fc86d1fa08180585bc121063172f1311f14429302386df2cbe0e10feec8d"}
{"level":"debug","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5778fc86d1fa08180585bc121063172f1311f14429302386df2cbe0e10feec8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5778fc86d1fa08180585bc121063172f1311f14429302386df2cbe0e10feec8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5778fc86d1fa08180585bc121063172f1311f14429302386df2cbe0e10feec8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5778fc86d1fa08180585bc121063172f1311f14429302386df2cbe0e10feec8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630"}
{"level":"info","ts":"2026-07-09T17:46:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5778fc86d1fa08180585bc121063172f1311f14429302386df2cbe0e10feec8d"}
{"level":"debug","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32"}
{"level":"debug","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32"}
{"level":"debug","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32"}
{"level":"debug","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32"}
{"level":"debug","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32"}
{"level":"debug","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"debug","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512"}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc66eda2d11eaf383d81871b064f9509d216f4812d72be2465a8808a9d5d0d29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc66eda2d11eaf383d81871b064f9509d216f4812d72be2465a8808a9d5d0d29"}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0"}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f"}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa"}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"}
{"level":"error","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa"}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa"}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a"}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b"}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5778fc86d1fa08180585bc121063172f1311f14429302386df2cbe0e10feec8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5778fc86d1fa08180585bc121063172f1311f14429302386df2cbe0e10feec8d"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630"}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c"}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d26e6cd9d4b62ca520af10395bae91b9572baf1e53663e515825a97bb4d3f3f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec"}
{"level":"debug","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543"}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d26e6cd9d4b62ca520af10395bae91b9572baf1e53663e515825a97bb4d3f3f7"}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2"}
{"level":"info","ts":"2026-07-09T17:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6"}
{"level":"info","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9aae857-f690-4bde-8ed7-8648121d0c57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48884","PortSpecifier":{"PortValue":48884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9aae857-f690-4bde-8ed7-8648121d0c57","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9aae857-f690-4bde-8ed7-8648121d0c57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48884","PortSpecifier":{"PortValue":48884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619182,"nanos":208508930},"http":{"id":"a9aae857-f690-4bde-8ed7-8648121d0c57","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a9aae857-f690-4bde-8ed7-8648121d0c57","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9aae857-f690-4bde-8ed7-8648121d0c57","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9aae857-f690-4bde-8ed7-8648121d0c57","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9aae857-f690-4bde-8ed7-8648121d0c57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9aae857-f690-4bde-8ed7-8648121d0c57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9aae857-f690-4bde-8ed7-8648121d0c57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/sub-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9aae857-f690-4bde-8ed7-8648121d0c57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9aae857-f690-4bde-8ed7-8648121d0c57","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9aae857-f690-4bde-8ed7-8648121d0c57","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9aae857-f690-4bde-8ed7-8648121d0c57","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9aae857-f690-4bde-8ed7-8648121d0c57","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28b037d4-d400-4f7a-be3f-fbee94196b54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58570","PortSpecifier":{"PortValue":58570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28b037d4-d400-4f7a-be3f-fbee94196b54","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28b037d4-d400-4f7a-be3f-fbee94196b54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58570","PortSpecifier":{"PortValue":58570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619182,"nanos":257754650},"http":{"id":"28b037d4-d400-4f7a-be3f-fbee94196b54","method":"POST","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28b037d4-d400-4f7a-be3f-fbee94196b54","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28b037d4-d400-4f7a-be3f-fbee94196b54","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28b037d4-d400-4f7a-be3f-fbee94196b54","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28b037d4-d400-4f7a-be3f-fbee94196b54","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28b037d4-d400-4f7a-be3f-fbee94196b54","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28b037d4-d400-4f7a-be3f-fbee94196b54","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f62372/sub-test-model-f62372\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28b037d4-d400-4f7a-be3f-fbee94196b54","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28b037d4-d400-4f7a-be3f-fbee94196b54","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28b037d4-d400-4f7a-be3f-fbee94196b54","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28b037d4-d400-4f7a-be3f-fbee94196b54","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28b037d4-d400-4f7a-be3f-fbee94196b54","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48892","PortSpecifier":{"PortValue":48892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48892","PortSpecifier":{"PortValue":48892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619182,"nanos":299989248},"http":{"id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","method":"GET","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C20KfTWy0XRq4qVi_KiEfKCbZ6976Os4816spSyksvM4fBfD0vw6mAdaMOJW"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C20KfTWy0XRq4qVi_KiEfKCbZ6976Os4816spSyksvM4fBfD0vw6mAdaMOJW\"}"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1ff54fb2-874a-4994-93f7-4486d32fab74","keyName":"e2e-sub-iso-d12d25","subscription":"e2e-a-only-2a56f5","tenant":"e2e-shared-a-77a679","userId":"1ff54fb2-874a-4994-93f7-4486d32fab74","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/sub-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-2a56f5"}
{"level":"info","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"980524b1-6b7a-4d6e-9df2-c2544f29bd79","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d684b6e-5054-4019-ba44-524e59bbfce6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58572","PortSpecifier":{"PortValue":58572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d684b6e-5054-4019-ba44-524e59bbfce6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d684b6e-5054-4019-ba44-524e59bbfce6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58572","PortSpecifier":{"PortValue":58572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619182,"nanos":344828095},"http":{"id":"8d684b6e-5054-4019-ba44-524e59bbfce6","method":"GET","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d684b6e-5054-4019-ba44-524e59bbfce6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7HD2aSmJSLsKjuOF_cekP7P8oGwOLtpovsvGEVIWZC7ExNjZzCqGEVROOWRN"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d684b6e-5054-4019-ba44-524e59bbfce6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f62372.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7HD2aSmJSLsKjuOF_cekP7P8oGwOLtpovsvGEVIWZC7ExNjZzCqGEVROOWRN\"}"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d684b6e-5054-4019-ba44-524e59bbfce6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f62372.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48d367a6-d611-4ac0-bd97-278df1f692a3","keyName":"e2e-sub-iso-2b176c","subscription":"e2e-b-only-2a56f5","tenant":"e2e-shared-b-f62372","userId":"48d367a6-d611-4ac0-bd97-278df1f692a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d684b6e-5054-4019-ba44-524e59bbfce6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d684b6e-5054-4019-ba44-524e59bbfce6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d684b6e-5054-4019-ba44-524e59bbfce6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d684b6e-5054-4019-ba44-524e59bbfce6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f62372/sub-test-model-f62372\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d684b6e-5054-4019-ba44-524e59bbfce6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d684b6e-5054-4019-ba44-524e59bbfce6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d684b6e-5054-4019-ba44-524e59bbfce6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-2a56f5"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d684b6e-5054-4019-ba44-524e59bbfce6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d684b6e-5054-4019-ba44-524e59bbfce6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:46:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d684b6e-5054-4019-ba44-524e59bbfce6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b144c9b7-b4a0-46ba-9c18-32e2b80e95c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35714","PortSpecifier":{"PortValue":35714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b144c9b7-b4a0-46ba-9c18-32e2b80e95c6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b144c9b7-b4a0-46ba-9c18-32e2b80e95c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35714","PortSpecifier":{"PortValue":35714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619195,"nanos":49093877},"http":{"id":"b144c9b7-b4a0-46ba-9c18-32e2b80e95c6","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b144c9b7-b4a0-46ba-9c18-32e2b80e95c6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b144c9b7-b4a0-46ba-9c18-32e2b80e95c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b144c9b7-b4a0-46ba-9c18-32e2b80e95c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b144c9b7-b4a0-46ba-9c18-32e2b80e95c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b144c9b7-b4a0-46ba-9c18-32e2b80e95c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b144c9b7-b4a0-46ba-9c18-32e2b80e95c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/sub-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b144c9b7-b4a0-46ba-9c18-32e2b80e95c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b144c9b7-b4a0-46ba-9c18-32e2b80e95c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b144c9b7-b4a0-46ba-9c18-32e2b80e95c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b144c9b7-b4a0-46ba-9c18-32e2b80e95c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b144c9b7-b4a0-46ba-9c18-32e2b80e95c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c13107b-dc25-4f59-8f3c-8f42d1ce1255","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38794","PortSpecifier":{"PortValue":38794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c13107b-dc25-4f59-8f3c-8f42d1ce1255","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c13107b-dc25-4f59-8f3c-8f42d1ce1255","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38794","PortSpecifier":{"PortValue":38794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619195,"nanos":114166305},"http":{"id":"6c13107b-dc25-4f59-8f3c-8f42d1ce1255","method":"POST","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c13107b-dc25-4f59-8f3c-8f42d1ce1255","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c13107b-dc25-4f59-8f3c-8f42d1ce1255","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c13107b-dc25-4f59-8f3c-8f42d1ce1255","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c13107b-dc25-4f59-8f3c-8f42d1ce1255","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c13107b-dc25-4f59-8f3c-8f42d1ce1255","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c13107b-dc25-4f59-8f3c-8f42d1ce1255","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f62372/sub-test-model-f62372\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c13107b-dc25-4f59-8f3c-8f42d1ce1255","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c13107b-dc25-4f59-8f3c-8f42d1ce1255","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c13107b-dc25-4f59-8f3c-8f42d1ce1255","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c13107b-dc25-4f59-8f3c-8f42d1ce1255","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c13107b-dc25-4f59-8f3c-8f42d1ce1255","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35722","PortSpecifier":{"PortValue":35722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35722","PortSpecifier":{"PortValue":35722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619195,"nanos":159287864},"http":{"id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pWrhrFfFqA6u9rbc_OR0sjwyIRCKaE8PfglyxfiZqrILYZKtjlh0VWLt8DTr"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pWrhrFfFqA6u9rbc_OR0sjwyIRCKaE8PfglyxfiZqrILYZKtjlh0VWLt8DTr\"}"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e37a7253-da44-47f6-83b7-cc8186794cd0","keyName":"e2e-sub-iso-89ccc1","subscription":"e2e-shared-sub-10709f","tenant":"e2e-shared-a-77a679","userId":"e37a7253-da44-47f6-83b7-cc8186794cd0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/sub-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-10709f"}
{"level":"info","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce55330c-33ae-4bc1-a03a-ecd0fa8ea449","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38802","PortSpecifier":{"PortValue":38802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38802","PortSpecifier":{"PortValue":38802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619195,"nanos":192833108},"http":{"id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","method":"POST","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6VvI8pYb7IVxZGKt_tX5otpbugq5CjnX7hvbpOqzLUWEooCej2Afa13da4W4"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f62372.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6VvI8pYb7IVxZGKt_tX5otpbugq5CjnX7hvbpOqzLUWEooCej2Afa13da4W4\"}"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f62372.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2c9e0dc1-cd04-49dd-9e81-8aacd56e0f5b","keyName":"e2e-sub-iso-5998cd","subscription":"e2e-shared-sub-10709f","tenant":"e2e-shared-b-f62372","userId":"2c9e0dc1-cd04-49dd-9e81-8aacd56e0f5b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f62372/sub-test-model-f62372\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-10709f"}
{"level":"info","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:46:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"313fb1a5-31a3-44c8-aba1-f5c89808c362","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7618ec14768d9ce221f6e67fe5771c6c70b128c36d1892dbb2c1c331889faec"}
{"level":"info","ts":"2026-07-09T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f86462f6b06f27330252d3032f3dd2724b7d753f82e7eb136e8557493313d3fa"}
{"level":"info","ts":"2026-07-09T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b138b4a6b61a18ae54ca02a28244bca14083ad8cd1eabeadfe8a5402986b6cc9"}
{"level":"info","ts":"2026-07-09T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39adb5cc231a4435d41635d0d6f0aee7f435e7d60f8992417bc8b7f2b48ba0e3"}
{"level":"info","ts":"2026-07-09T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d3378d17f2259c16131d35630ebe47545c8e38614eef0f5df6c1a9412b59338"}
{"level":"info","ts":"2026-07-09T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc66eda2d11eaf383d81871b064f9509d216f4812d72be2465a8808a9d5d0d29"}
{"level":"info","ts":"2026-07-09T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a75a68d10e3d40a615929cf117e2257e1f01888286cdb0c7054c7d634868543"}
{"level":"info","ts":"2026-07-09T17:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4faf4a6dc01e39405dc4e2649100d9a675ac870b7b717c70f043a3c190f86b32"}
{"level":"info","ts":"2026-07-09T17:46:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/720b2ea9b93128ae9054b3ace3c352aabf8997424af8042b4051c2fe4bc16512"}
{"level":"info","ts":"2026-07-09T17:46:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f627a9746c2723e90973d44c7d15ec2a2116295c55a2537abb4d81d010ba191b"}
{"level":"info","ts":"2026-07-09T17:46:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ede3c3204edd33a8dca66d883064b729e52f7c690108e9da8091049d5a618630"}
{"level":"info","ts":"2026-07-09T17:46:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce27db5e0e4e2c4541a846d4ccf3e97cf4b04095e019b78f6e856b0b7dd9d531"}
{"level":"info","ts":"2026-07-09T17:46:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5778fc86d1fa08180585bc121063172f1311f14429302386df2cbe0e10feec8d"}
{"level":"info","ts":"2026-07-09T17:46:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c6443c23ab82b7c49963ac912ddb781b92155c020fd9bdc3278189299835ca6"}
{"level":"info","ts":"2026-07-09T17:46:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1efb24f0e91f0208fe097597e30bb16644fe6bf535779edf1c5a5b16f8a0bbd"}
{"level":"info","ts":"2026-07-09T17:46:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba854217d53e0cc8379fcbc638b9f8f5496f4489c0fa7b938de40fddfbb4b17c"}
{"level":"debug","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d"}
{"level":"info","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d"}
{"level":"error","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d"}
{"level":"info","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d"}
{"level":"debug","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d"}
{"level":"debug","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d"}
{"level":"debug","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d"}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d45c8d7d3349f63552d8b70bfa82edefde699449c0061cea607f6b8c25df91fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d45c8d7d3349f63552d8b70bfa82edefde699449c0061cea607f6b8c25df91fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d45c8d7d3349f63552d8b70bfa82edefde699449c0061cea607f6b8c25df91fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d45c8d7d3349f63552d8b70bfa82edefde699449c0061cea607f6b8c25df91fb"}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d45c8d7d3349f63552d8b70bfa82edefde699449c0061cea607f6b8c25df91fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d45c8d7d3349f63552d8b70bfa82edefde699449c0061cea607f6b8c25df91fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d45c8d7d3349f63552d8b70bfa82edefde699449c0061cea607f6b8c25df91fb"}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d45c8d7d3349f63552d8b70bfa82edefde699449c0061cea607f6b8c25df91fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d45c8d7d3349f63552d8b70bfa82edefde699449c0061cea607f6b8c25df91fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d45c8d7d3349f63552d8b70bfa82edefde699449c0061cea607f6b8c25df91fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d45c8d7d3349f63552d8b70bfa82edefde699449c0061cea607f6b8c25df91fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d45c8d7d3349f63552d8b70bfa82edefde699449c0061cea607f6b8c25df91fb"}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d"}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d"}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d"}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa"}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa"}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa"}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa"}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa"}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0537a8ce8da1ad8fe6429cd98ff0ef7074c20e3e1bc80061927e2895141c89b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0537a8ce8da1ad8fe6429cd98ff0ef7074c20e3e1bc80061927e2895141c89b8"}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0537a8ce8da1ad8fe6429cd98ff0ef7074c20e3e1bc80061927e2895141c89b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0537a8ce8da1ad8fe6429cd98ff0ef7074c20e3e1bc80061927e2895141c89b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0537a8ce8da1ad8fe6429cd98ff0ef7074c20e3e1bc80061927e2895141c89b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0537a8ce8da1ad8fe6429cd98ff0ef7074c20e3e1bc80061927e2895141c89b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0537a8ce8da1ad8fe6429cd98ff0ef7074c20e3e1bc80061927e2895141c89b8"}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0537a8ce8da1ad8fe6429cd98ff0ef7074c20e3e1bc80061927e2895141c89b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0537a8ce8da1ad8fe6429cd98ff0ef7074c20e3e1bc80061927e2895141c89b8"}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ae11ad31559f26f408e7a2de4c9ab8d839fdd6724665b4ecf4b4e2321f80757","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ae11ad31559f26f408e7a2de4c9ab8d839fdd6724665b4ecf4b4e2321f80757","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae11ad31559f26f408e7a2de4c9ab8d839fdd6724665b4ecf4b4e2321f80757"}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ae11ad31559f26f408e7a2de4c9ab8d839fdd6724665b4ecf4b4e2321f80757","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ae11ad31559f26f408e7a2de4c9ab8d839fdd6724665b4ecf4b4e2321f80757"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877f08341a232c4d0461f1e8cba3232af07f65e4de6c832079b2477273354437"}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ae11ad31559f26f408e7a2de4c9ab8d839fdd6724665b4ecf4b4e2321f80757","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877f08341a232c4d0461f1e8cba3232af07f65e4de6c832079b2477273354437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["877f08341a232c4d0461f1e8cba3232af07f65e4de6c832079b2477273354437"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae11ad31559f26f408e7a2de4c9ab8d839fdd6724665b4ecf4b4e2321f80757"}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877f08341a232c4d0461f1e8cba3232af07f65e4de6c832079b2477273354437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae11ad31559f26f408e7a2de4c9ab8d839fdd6724665b4ecf4b4e2321f80757"}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ae11ad31559f26f408e7a2de4c9ab8d839fdd6724665b4ecf4b4e2321f80757","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877f08341a232c4d0461f1e8cba3232af07f65e4de6c832079b2477273354437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877f08341a232c4d0461f1e8cba3232af07f65e4de6c832079b2477273354437"}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877f08341a232c4d0461f1e8cba3232af07f65e4de6c832079b2477273354437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"877f08341a232c4d0461f1e8cba3232af07f65e4de6c832079b2477273354437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["877f08341a232c4d0461f1e8cba3232af07f65e4de6c832079b2477273354437"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"}
{"level":"info","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"877f08341a232c4d0461f1e8cba3232af07f65e4de6c832079b2477273354437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877f08341a232c4d0461f1e8cba3232af07f65e4de6c832079b2477273354437"}
{"level":"info","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877f08341a232c4d0461f1e8cba3232af07f65e4de6c832079b2477273354437"}
{"level":"info","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877f08341a232c4d0461f1e8cba3232af07f65e4de6c832079b2477273354437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"}
{"level":"info","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"}
{"level":"debug","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:46:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:46:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"}
{"level":"debug","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"}
{"level":"debug","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:46:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:46:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:46:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83"}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a"}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a"}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a"}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a"}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989"}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a"}
{"level":"error","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989"}
{"level":"error","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085"}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085"}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085"}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee19b726b6ded4f55a91e51224c031bf8c33af7bdbb3c9a9d924968726cd0935","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee19b726b6ded4f55a91e51224c031bf8c33af7bdbb3c9a9d924968726cd0935","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee19b726b6ded4f55a91e51224c031bf8c33af7bdbb3c9a9d924968726cd0935"}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee19b726b6ded4f55a91e51224c031bf8c33af7bdbb3c9a9d924968726cd0935","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee19b726b6ded4f55a91e51224c031bf8c33af7bdbb3c9a9d924968726cd0935","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee19b726b6ded4f55a91e51224c031bf8c33af7bdbb3c9a9d924968726cd0935"}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee19b726b6ded4f55a91e51224c031bf8c33af7bdbb3c9a9d924968726cd0935","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee19b726b6ded4f55a91e51224c031bf8c33af7bdbb3c9a9d924968726cd0935"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085"}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee19b726b6ded4f55a91e51224c031bf8c33af7bdbb3c9a9d924968726cd0935","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee19b726b6ded4f55a91e51224c031bf8c33af7bdbb3c9a9d924968726cd0935","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee19b726b6ded4f55a91e51224c031bf8c33af7bdbb3c9a9d924968726cd0935"}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500"}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500"}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500"}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470"}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470"}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5a16158648089bda7b2f3ad043e18f25db3674bb5aa4e787717e1c6ccfa45f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5a16158648089bda7b2f3ad043e18f25db3674bb5aa4e787717e1c6ccfa45f"}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5a16158648089bda7b2f3ad043e18f25db3674bb5aa4e787717e1c6ccfa45f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b5a16158648089bda7b2f3ad043e18f25db3674bb5aa4e787717e1c6ccfa45f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b5a16158648089bda7b2f3ad043e18f25db3674bb5aa4e787717e1c6ccfa45f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470"}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b5a16158648089bda7b2f3ad043e18f25db3674bb5aa4e787717e1c6ccfa45f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5a16158648089bda7b2f3ad043e18f25db3674bb5aa4e787717e1c6ccfa45f"}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5a16158648089bda7b2f3ad043e18f25db3674bb5aa4e787717e1c6ccfa45f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470"}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5a16158648089bda7b2f3ad043e18f25db3674bb5aa4e787717e1c6ccfa45f"}
{"level":"info","ts":"2026-07-09T17:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470"}
{"level":"debug","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a"}
{"level":"debug","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a"}
{"level":"debug","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a"}
{"level":"debug","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a"}
{"level":"debug","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a"}
{"level":"debug","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d"}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d"}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d"}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d"}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0537a8ce8da1ad8fe6429cd98ff0ef7074c20e3e1bc80061927e2895141c89b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0537a8ce8da1ad8fe6429cd98ff0ef7074c20e3e1bc80061927e2895141c89b8"}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500"}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d45c8d7d3349f63552d8b70bfa82edefde699449c0061cea607f6b8c25df91fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d45c8d7d3349f63552d8b70bfa82edefde699449c0061cea607f6b8c25df91fb"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0"}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"debug","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f"}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b5a16158648089bda7b2f3ad043e18f25db3674bb5aa4e787717e1c6ccfa45f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470"}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"877f08341a232c4d0461f1e8cba3232af07f65e4de6c832079b2477273354437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b5a16158648089bda7b2f3ad043e18f25db3674bb5aa4e787717e1c6ccfa45f"}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d26e6cd9d4b62ca520af10395bae91b9572baf1e53663e515825a97bb4d3f3f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/877f08341a232c4d0461f1e8cba3232af07f65e4de6c832079b2477273354437"}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ae11ad31559f26f408e7a2de4c9ab8d839fdd6724665b4ecf4b4e2321f80757","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d26e6cd9d4b62ca520af10395bae91b9572baf1e53663e515825a97bb4d3f3f7"}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae11ad31559f26f408e7a2de4c9ab8d839fdd6724665b4ecf4b4e2321f80757"}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee19b726b6ded4f55a91e51224c031bf8c33af7bdbb3c9a9d924968726cd0935","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83"}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee19b726b6ded4f55a91e51224c031bf8c33af7bdbb3c9a9d924968726cd0935"}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085"}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2"}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T17:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa"}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a"}
{"level":"info","ts":"2026-07-09T17:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2"}
{"level":"info","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d215d00f-0f9f-4137-91d9-72a2a4588f81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34680","PortSpecifier":{"PortValue":34680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d215d00f-0f9f-4137-91d9-72a2a4588f81","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d215d00f-0f9f-4137-91d9-72a2a4588f81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34680","PortSpecifier":{"PortValue":34680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619256,"nanos":423040612},"http":{"id":"d215d00f-0f9f-4137-91d9-72a2a4588f81","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d215d00f-0f9f-4137-91d9-72a2a4588f81","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d215d00f-0f9f-4137-91d9-72a2a4588f81","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d215d00f-0f9f-4137-91d9-72a2a4588f81","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d215d00f-0f9f-4137-91d9-72a2a4588f81","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d215d00f-0f9f-4137-91d9-72a2a4588f81","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d215d00f-0f9f-4137-91d9-72a2a4588f81","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d215d00f-0f9f-4137-91d9-72a2a4588f81","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d215d00f-0f9f-4137-91d9-72a2a4588f81","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d215d00f-0f9f-4137-91d9-72a2a4588f81","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d215d00f-0f9f-4137-91d9-72a2a4588f81","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d215d00f-0f9f-4137-91d9-72a2a4588f81","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"827bd5ce-9c7c-432a-9ce7-8be64440fd1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37508","PortSpecifier":{"PortValue":37508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"827bd5ce-9c7c-432a-9ce7-8be64440fd1b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"827bd5ce-9c7c-432a-9ce7-8be64440fd1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37508","PortSpecifier":{"PortValue":37508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619256,"nanos":466217958},"http":{"id":"827bd5ce-9c7c-432a-9ce7-8be64440fd1b","method":"POST","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"827bd5ce-9c7c-432a-9ce7-8be64440fd1b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"827bd5ce-9c7c-432a-9ce7-8be64440fd1b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"827bd5ce-9c7c-432a-9ce7-8be64440fd1b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"827bd5ce-9c7c-432a-9ce7-8be64440fd1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"827bd5ce-9c7c-432a-9ce7-8be64440fd1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"827bd5ce-9c7c-432a-9ce7-8be64440fd1b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f62372/rate-test-model-f62372\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"827bd5ce-9c7c-432a-9ce7-8be64440fd1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"827bd5ce-9c7c-432a-9ce7-8be64440fd1b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"827bd5ce-9c7c-432a-9ce7-8be64440fd1b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"827bd5ce-9c7c-432a-9ce7-8be64440fd1b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"827bd5ce-9c7c-432a-9ce7-8be64440fd1b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34694","PortSpecifier":{"PortValue":34694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e820f1d3-660d-400a-bb98-b11e799c3599","method":"POST","path":"/ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679/v1/completions","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34694","PortSpecifier":{"PortValue":34694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619256,"nanos":513270918},"http":{"id":"e820f1d3-660d-400a-bb98-b11e799c3599","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-V2rLisFMlYb4xiEC_g0lQXiaBdXWucJUWASwvCcxAkhkitpT6OUypCp51COd"}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-V2rLisFMlYb4xiEC_g0lQXiaBdXWucJUWASwvCcxAkhkitpT6OUypCp51COd\"}"}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b497ff2f-4f2e-4671-808e-13610f3d4324","keyName":"e2e-rate-a-773e05","subscription":"e2e-rate-iso-a-773e05","tenant":"e2e-shared-a-77a679","userId":"b497ff2f-4f2e-4671-808e-13610f3d4324","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679\",\"requestedSubscription\":\"e2e-rate-iso-a-773e05\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77a679","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-773e05","namespace":"ai-tenant-e2e-shared-a-77a679","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-773e05"}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b497ff2f-4f2e-4671-808e-13610f3d4324","keyName":"e2e-rate-a-773e05","selected_subscription":"e2e-rate-iso-a-773e05","selected_subscription_key":"ai-tenant-e2e-shared-a-77a679/e2e-rate-iso-a-773e05@ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77a679","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-773e05","namespace":"ai-tenant-e2e-shared-a-77a679","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:47:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e820f1d3-660d-400a-bb98-b11e799c3599","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55af9222-4a08-4dac-a05f-e3e357474074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37054","PortSpecifier":{"PortValue":37054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55af9222-4a08-4dac-a05f-e3e357474074","method":"POST","path":"/ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679/v1/completions","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55af9222-4a08-4dac-a05f-e3e357474074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37054","PortSpecifier":{"PortValue":37054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619257,"nanos":603826790},"http":{"id":"55af9222-4a08-4dac-a05f-e3e357474074","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55af9222-4a08-4dac-a05f-e3e357474074","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-V2rLisFMlYb4xiEC_g0lQXiaBdXWucJUWASwvCcxAkhkitpT6OUypCp51COd"}
{"level":"debug","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"55af9222-4a08-4dac-a05f-e3e357474074","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-V2rLisFMlYb4xiEC_g0lQXiaBdXWucJUWASwvCcxAkhkitpT6OUypCp51COd\"}"}
{"level":"debug","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"55af9222-4a08-4dac-a05f-e3e357474074","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b497ff2f-4f2e-4671-808e-13610f3d4324","keyName":"e2e-rate-a-773e05","subscription":"e2e-rate-iso-a-773e05","tenant":"e2e-shared-a-77a679","userId":"b497ff2f-4f2e-4671-808e-13610f3d4324","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"55af9222-4a08-4dac-a05f-e3e357474074","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679\",\"requestedSubscription\":\"e2e-rate-iso-a-773e05\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"55af9222-4a08-4dac-a05f-e3e357474074","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77a679","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-773e05","namespace":"ai-tenant-e2e-shared-a-77a679","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55af9222-4a08-4dac-a05f-e3e357474074","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55af9222-4a08-4dac-a05f-e3e357474074","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55af9222-4a08-4dac-a05f-e3e357474074","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55af9222-4a08-4dac-a05f-e3e357474074","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55af9222-4a08-4dac-a05f-e3e357474074","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55af9222-4a08-4dac-a05f-e3e357474074","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55af9222-4a08-4dac-a05f-e3e357474074","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55af9222-4a08-4dac-a05f-e3e357474074","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-773e05"}
{"level":"debug","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55af9222-4a08-4dac-a05f-e3e357474074","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b497ff2f-4f2e-4671-808e-13610f3d4324","keyName":"e2e-rate-a-773e05","selected_subscription":"e2e-rate-iso-a-773e05","selected_subscription_key":"ai-tenant-e2e-shared-a-77a679/e2e-rate-iso-a-773e05@ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77a679","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-773e05","namespace":"ai-tenant-e2e-shared-a-77a679","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55af9222-4a08-4dac-a05f-e3e357474074","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:47:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55af9222-4a08-4dac-a05f-e3e357474074","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37056","PortSpecifier":{"PortValue":37056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afe1cb6a-d7aa-46de-a74e-39058c526273","method":"POST","path":"/ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679/v1/completions","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37056","PortSpecifier":{"PortValue":37056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619258,"nanos":646921105},"http":{"id":"afe1cb6a-d7aa-46de-a74e-39058c526273","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-V2rLisFMlYb4xiEC_g0lQXiaBdXWucJUWASwvCcxAkhkitpT6OUypCp51COd"}
{"level":"debug","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-V2rLisFMlYb4xiEC_g0lQXiaBdXWucJUWASwvCcxAkhkitpT6OUypCp51COd\"}"}
{"level":"debug","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b497ff2f-4f2e-4671-808e-13610f3d4324","keyName":"e2e-rate-a-773e05","subscription":"e2e-rate-iso-a-773e05","tenant":"e2e-shared-a-77a679","userId":"b497ff2f-4f2e-4671-808e-13610f3d4324","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679\",\"requestedSubscription\":\"e2e-rate-iso-a-773e05\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77a679","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-773e05","namespace":"ai-tenant-e2e-shared-a-77a679","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-773e05"}
{"level":"debug","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b497ff2f-4f2e-4671-808e-13610f3d4324","keyName":"e2e-rate-a-773e05","selected_subscription":"e2e-rate-iso-a-773e05","selected_subscription_key":"ai-tenant-e2e-shared-a-77a679/e2e-rate-iso-a-773e05@ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77a679","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-773e05","namespace":"ai-tenant-e2e-shared-a-77a679","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:47:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afe1cb6a-d7aa-46de-a74e-39058c526273","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27940871-699d-4765-8a28-dbbc1df6031f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47968","PortSpecifier":{"PortValue":47968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27940871-699d-4765-8a28-dbbc1df6031f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27940871-699d-4765-8a28-dbbc1df6031f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47968","PortSpecifier":{"PortValue":47968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619273,"nanos":716106461},"http":{"id":"27940871-699d-4765-8a28-dbbc1df6031f","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27940871-699d-4765-8a28-dbbc1df6031f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27940871-699d-4765-8a28-dbbc1df6031f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27940871-699d-4765-8a28-dbbc1df6031f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27940871-699d-4765-8a28-dbbc1df6031f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27940871-699d-4765-8a28-dbbc1df6031f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27940871-699d-4765-8a28-dbbc1df6031f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27940871-699d-4765-8a28-dbbc1df6031f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27940871-699d-4765-8a28-dbbc1df6031f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27940871-699d-4765-8a28-dbbc1df6031f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27940871-699d-4765-8a28-dbbc1df6031f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27940871-699d-4765-8a28-dbbc1df6031f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2d82e57-a6ab-47d5-9f3c-65261335176e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56590","PortSpecifier":{"PortValue":56590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2d82e57-a6ab-47d5-9f3c-65261335176e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2d82e57-a6ab-47d5-9f3c-65261335176e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56590","PortSpecifier":{"PortValue":56590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619273,"nanos":756631997},"http":{"id":"a2d82e57-a6ab-47d5-9f3c-65261335176e","method":"POST","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a2d82e57-a6ab-47d5-9f3c-65261335176e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2d82e57-a6ab-47d5-9f3c-65261335176e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"]}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2d82e57-a6ab-47d5-9f3c-65261335176e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f2e88242ac47"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2bf37816-916c-4de4-96f7-048093219d61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de1fd760-9100-45ba-abac-e082e28a5d5f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2d82e57-a6ab-47d5-9f3c-65261335176e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2d82e57-a6ab-47d5-9f3c-65261335176e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2d82e57-a6ab-47d5-9f3c-65261335176e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f62372/rate-test-model-f62372\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a2d82e57-a6ab-47d5-9f3c-65261335176e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2d82e57-a6ab-47d5-9f3c-65261335176e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2d82e57-a6ab-47d5-9f3c-65261335176e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2d82e57-a6ab-47d5-9f3c-65261335176e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2d82e57-a6ab-47d5-9f3c-65261335176e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47984","PortSpecifier":{"PortValue":47984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","method":"POST","path":"/ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679/v1/completions","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47984","PortSpecifier":{"PortValue":47984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619273,"nanos":796374523},"http":{"id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PvUHVuV1R7WKi43k_Q2X6QSfG8VSL4EEMAg0Rf9dAuP2m9CIZ7dTa9P8LNNP"}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PvUHVuV1R7WKi43k_Q2X6QSfG8VSL4EEMAg0Rf9dAuP2m9CIZ7dTa9P8LNNP\"}"}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ec3613a6-9e3c-4173-b727-25a8c8b930dc","keyName":"e2e-rate-a-9a5fa8","subscription":"e2e-rate-iso-a-9a5fa8","tenant":"e2e-shared-a-77a679","userId":"ec3613a6-9e3c-4173-b727-25a8c8b930dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679\",\"requestedSubscription\":\"e2e-rate-iso-a-9a5fa8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77a679","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9a5fa8","namespace":"ai-tenant-e2e-shared-a-77a679","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9a5fa8"}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ec3613a6-9e3c-4173-b727-25a8c8b930dc","keyName":"e2e-rate-a-9a5fa8","selected_subscription":"e2e-rate-iso-a-9a5fa8","selected_subscription_key":"ai-tenant-e2e-shared-a-77a679/e2e-rate-iso-a-9a5fa8@ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77a679","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9a5fa8","namespace":"ai-tenant-e2e-shared-a-77a679","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:47:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f8056e5-dca0-48d8-b050-6cbec5ee353b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47990","PortSpecifier":{"PortValue":47990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","method":"POST","path":"/ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679/v1/completions","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47990","PortSpecifier":{"PortValue":47990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619274,"nanos":837037788},"http":{"id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PvUHVuV1R7WKi43k_Q2X6QSfG8VSL4EEMAg0Rf9dAuP2m9CIZ7dTa9P8LNNP"}
{"level":"debug","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PvUHVuV1R7WKi43k_Q2X6QSfG8VSL4EEMAg0Rf9dAuP2m9CIZ7dTa9P8LNNP\"}"}
{"level":"debug","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ec3613a6-9e3c-4173-b727-25a8c8b930dc","keyName":"e2e-rate-a-9a5fa8","subscription":"e2e-rate-iso-a-9a5fa8","tenant":"e2e-shared-a-77a679","userId":"ec3613a6-9e3c-4173-b727-25a8c8b930dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679\",\"requestedSubscription\":\"e2e-rate-iso-a-9a5fa8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77a679","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9a5fa8","namespace":"ai-tenant-e2e-shared-a-77a679","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9a5fa8"}
{"level":"debug","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ec3613a6-9e3c-4173-b727-25a8c8b930dc","keyName":"e2e-rate-a-9a5fa8","selected_subscription":"e2e-rate-iso-a-9a5fa8","selected_subscription_key":"ai-tenant-e2e-shared-a-77a679/e2e-rate-iso-a-9a5fa8@ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77a679","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9a5fa8","namespace":"ai-tenant-e2e-shared-a-77a679","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:47:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36766009-d76d-4eaa-ba2b-2fe60d249e8d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47992","PortSpecifier":{"PortValue":47992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d0024c2-78e5-4514-9834-bae8b00e1758","method":"POST","path":"/ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679/v1/completions","host":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47992","PortSpecifier":{"PortValue":47992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619275,"nanos":874321703},"http":{"id":"2d0024c2-78e5-4514-9834-bae8b00e1758","method":"POST","headers":{":authority":"e2e-shared-a-77a679.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PvUHVuV1R7WKi43k_Q2X6QSfG8VSL4EEMAg0Rf9dAuP2m9CIZ7dTa9P8LNNP"}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PvUHVuV1R7WKi43k_Q2X6QSfG8VSL4EEMAg0Rf9dAuP2m9CIZ7dTa9P8LNNP\"}"}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ec3613a6-9e3c-4173-b727-25a8c8b930dc","keyName":"e2e-rate-a-9a5fa8","subscription":"e2e-rate-iso-a-9a5fa8","tenant":"e2e-shared-a-77a679","userId":"ec3613a6-9e3c-4173-b727-25a8c8b930dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679\",\"requestedSubscription\":\"e2e-rate-iso-a-9a5fa8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-77a679.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77a679","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9a5fa8","namespace":"ai-tenant-e2e-shared-a-77a679","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9a5fa8"}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ec3613a6-9e3c-4173-b727-25a8c8b930dc","keyName":"e2e-rate-a-9a5fa8","selected_subscription":"e2e-rate-iso-a-9a5fa8","selected_subscription_key":"ai-tenant-e2e-shared-a-77a679/e2e-rate-iso-a-9a5fa8@ai-tenant-e2e-shared-a-77a679/rate-test-model-77a679","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77a679","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9a5fa8","namespace":"ai-tenant-e2e-shared-a-77a679","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d0024c2-78e5-4514-9834-bae8b00e1758","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56598","PortSpecifier":{"PortValue":56598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea2d01df-efa9-4fec-8004-2970abe0d860","method":"POST","path":"/ai-tenant-e2e-shared-b-f62372/rate-test-model-f62372/v1/completions","host":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56598","PortSpecifier":{"PortValue":56598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783619275,"nanos":913872757},"http":{"id":"ea2d01df-efa9-4fec-8004-2970abe0d860","method":"POST","headers":{":authority":"e2e-shared-b-f62372.apps.58e2e7d1-3381-4948-b3db-f2e88242ac47.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f62372/rate-test-model-f62372/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FSdh69LUKHcUTvzm_jZ8XprHfoQmqeHca295i4SjxQu2OLGxk17d5HZEDTrv"}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f62372.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FSdh69LUKHcUTvzm_jZ8XprHfoQmqeHca295i4SjxQu2OLGxk17d5HZEDTrv\"}"}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f62372.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c630a9b-3934-4b47-95fb-9ed82f554e5b","keyName":"e2e-rate-b-9a5fa8","subscription":"e2e-rate-iso-b-9a5fa8","tenant":"e2e-shared-b-f62372","userId":"4c630a9b-3934-4b47-95fb-9ed82f554e5b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f62372.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f62372/rate-test-model-f62372\",\"requestedSubscription\":\"e2e-rate-iso-b-9a5fa8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f62372.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f62372","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9a5fa8","namespace":"ai-tenant-e2e-shared-b-f62372","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f62372/rate-test-model-f62372\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-9a5fa8"}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c630a9b-3934-4b47-95fb-9ed82f554e5b","keyName":"e2e-rate-b-9a5fa8","selected_subscription":"e2e-rate-iso-b-9a5fa8","selected_subscription_key":"ai-tenant-e2e-shared-b-f62372/e2e-rate-iso-b-9a5fa8@ai-tenant-e2e-shared-b-f62372/rate-test-model-f62372","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f62372","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9a5fa8","namespace":"ai-tenant-e2e-shared-b-f62372","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T17:47:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea2d01df-efa9-4fec-8004-2970abe0d860","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T17:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e322e3ea71b3f83ac869bbb0fbeb6cc609dab7e8f06d74c3314ecaa939dfd83"}
{"level":"info","ts":"2026-07-09T17:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/877f08341a232c4d0461f1e8cba3232af07f65e4de6c832079b2477273354437"}
{"level":"info","ts":"2026-07-09T17:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b5a16158648089bda7b2f3ad043e18f25db3674bb5aa4e787717e1c6ccfa45f"}
{"level":"info","ts":"2026-07-09T17:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77be41b7b570707e3e3f0e1f85c9b1911b058c05dafd4b8c7362337b19e80989"}
{"level":"info","ts":"2026-07-09T17:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee19b726b6ded4f55a91e51224c031bf8c33af7bdbb3c9a9d924968726cd0935"}
{"level":"info","ts":"2026-07-09T17:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac9262fcefba4cdc6d279224b51e5af3ad72531fa182549230a0176dbf6bd52a"}
{"level":"info","ts":"2026-07-09T17:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0537a8ce8da1ad8fe6429cd98ff0ef7074c20e3e1bc80061927e2895141c89b8"}
{"level":"info","ts":"2026-07-09T17:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6c300a14ad3088cec8f7f472c7ee83b0c009a102a3fd80749ab4a2baf1ee14d"}
{"level":"info","ts":"2026-07-09T17:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ae11ad31559f26f408e7a2de4c9ab8d839fdd6724665b4ecf4b4e2321f80757"}
{"level":"info","ts":"2026-07-09T17:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4447c2e575dab5afbe31dd653c3bcb094a4e5bfa946ab51190a9152034251085"}
{"level":"info","ts":"2026-07-09T17:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d45c8d7d3349f63552d8b70bfa82edefde699449c0061cea607f6b8c25df91fb"}
{"level":"info","ts":"2026-07-09T17:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c02919dcab9c16530764c31bd9ac23af9bb8f5ce7be23632c0cf59530356470"}
{"level":"info","ts":"2026-07-09T17:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd19926cc8fee5f8eae9dac13ae12463b670a506f8f37c168562c9be7622be2a"}
{"level":"info","ts":"2026-07-09T17:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6c56a7c89793129af3ef98d7a0d568f67538a091a1bbdc27c1b71d66e414f9d"}
{"level":"info","ts":"2026-07-09T17:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecce43c8d48153eddc0556f7d4d5fc1c9f565e6b076d3b2b872a249ccd9d5baa"}
{"level":"info","ts":"2026-07-09T17:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adee3c1b6dd6b9c4a8263d7e89b0324f6c2c113df0d8d5f5629d125912925500"}
{"level":"info","ts":"2026-07-09T17:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a32e3ed82693423bed1ed8762e6b8d55811d568e402be4e8819000bc539fa6c0"}
{"level":"info","ts":"2026-07-09T17:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13e44d32f2d63d339b7a8336f9a2051a34cebf96bef53276dd9a8f0a8b33ddc2"}
{"level":"info","ts":"2026-07-09T17:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f96f632481d94f7703e15e1c2861e7caa6728bfa3ed64343322fe9031bd60e2a"}
{"level":"info","ts":"2026-07-09T17:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a35e436ebece02ad279590f2c8304a14ffad33884d7d2c53d944115516d8315c"}
{"level":"info","ts":"2026-07-09T17:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2cbf85b13b07dd61fc17bba4f82908acd9b065b0e1130ca364daaf50141a2d81"}
{"level":"info","ts":"2026-07-09T17:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d26e6cd9d4b62ca520af10395bae91b9572baf1e53663e515825a97bb4d3f3f7"}
{"level":"info","ts":"2026-07-09T17:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ebc9c1edb8bb89b5335f813db87a8cd32144cba2a0876bb40e9df9967a8eb2f"}
{"level":"info","ts":"2026-07-09T17:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69e1147f627846bd246d12ae57b59968c4496e76db4e9f900eae1fa319825f14"}